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INTRODUCTION 



Introduction to Mac OS X Assembler 
Guide 



The Mac OS X assembler serves a dual purpose. It assembles the output of gcc, Xcode's default 
compiler, for use by the Mac OS X linker. It also provides the means to assemble custom assembly 
language code written for its supported platforms. 

This document provides a reference for the use of the assembler, including basic syntax and statement 
layout. It also contains a list of the specific directives recognized by the assembler and complete 
instruction sets for the PowerPC and i386 processor architectures. 



Important: The "i386 Addressing Modes and Assembler Instructions" (page 125) section is considered 
preliminary. It has not been updated with the latest revisions to the i386 addressing modes and 
instructions. While most of the information is technically accurate, the document is incomplete and 
is subject to change. For more information, please see the section itself. 



Organization of This Document 



This document contains the following chapters: 

"Using the Assembler" (page 11) describes how to run the assembler and its relevant input/output 
files. It also discusses specific options that can be passed to the assembler on the command line. 

"Assembly Language Syntax" (page 17) describes the basic syntax of assembly language elements 
and expressions. 

'Assembly Language Statements" (page 25) describes in greater detail the assembly language 
statements that make up an assembly language program. 

"Assembler Directives" (page 31) describes assembler directives specific to the Mac OS X assembler 
and how to use them in your assembly code. 

"PowerPC Addressing Modes and Assembler Instructions" (page 59) contains information specific 
to the PowerPC processor architecture and provides a complete list of addressing modes and 
instructions relevant to it. 

"i386 Addressing Modes and Assembler Instructions" (page 125) contains information specific to 
the i386 processor architecture and provides a complete list of addressing modes and instructions 
relevant to it. 



Organization of This Document 
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■ "Mode-Independent Macros" (page 167) introduces the macros included in the Mac OS X vl0.4 
SDK to facilitate the development of assembly code that runs in 32-bit PowerPC and 64-bit 
PowerPC environments. 

This document also contains a revision history, and an index. 
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CHAPTER 



Using the Assembler 



This chapter describes how to run the a s assembler, which produces an object file from one or more 
files of assembly language source code. 



Note: Although a . out is the default file name that as gives to the object file that's created (as is 
conventional with many compilers), the format of the object file is not standard 4.4BSD a . o u t format. 
Object files produced by the assembler are in Mach-O (Mach object) file format. See Mac OS X ABI 
Mach-O File Format Reference for more information. 



Command Syntax 



To run the assembler, type the following command in a shell: 

as [ opti on ] ... [ file ] ... 

You can specify one or more command-line options. These assembler options are described in 
"Assembler Options" (page 11). 

You can specify one or more files containing assembly language source code. If no files are specified, 
a s uses the standard input (s td i n) for the assembly source input. 



Note: By convention, files containing assembly language source code should have the . s extension. 



Assembler Options 



The following command-line options are recognized by the assembler: 



-O 



The name argument after - o is used as the name of the a s output file, instead of a . out. 
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Use the standard input (s td i n) for the assembly source input. 



Fast; no need to run app (the assembler preprocessor). This option is intended for use by compilers 
that produce assembly code in a strict "clean" format that specifies exactly where whitespace can go. 
The app preprocessor needs to be run on handwritten assembly files and on files that have been 
preprocessed by c p p (the C preprocessor) . This typically is needed when assembler files are assembled 
through the use of the c c ( 1 ) command, which automatically runs the C preprocessor on assembly 
source files. The assembler preprocessor strips out excess spaces, turns each character surrounded 
by single quotation marks into a decimal constant, and turns occurrences of: 

# number filename level 

into: 

.line number;. file filename 

The assembler preprocessor can also be turned off by starting the assembly file with # N 0_ A P P \ n . When 
the assembler preprocessor has been turned off in this way, it can be turned on and off with pairs of 
#A P P \ n and # N 0_A P P \ n at the beginning of lines. This is used by the compiler to wrap assembly 
statements produced from asm( ) statements. 



"g 



Produce debugging information for the symbolic debugger g d b ( 1 ) so the assembly source can be 
debugged symbolically. For include files (included by the C preprocessor's #i ncl ude or by the 

assembler directive .include) that produce instructions in the ( TEXT , text) section, the include 

file must be included while a .text directive is in effect (that is, there must be a .text directive before 
the include) and end with the a .text directive in effect (at the end of the include file). Otherwise the 
debugger will have trouble dealing with that assembly file. 



-V 



Print the version of the assembler (both the Mac OS X version and the GNU version that it is based 
on). 
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-n 



-n 



Don't assume that the assembly file starts with a .text directive. 
-I 



- 1 d i r 

Add dir to the list of directories to search for files included with the .include directive. The default 
place to search is the current directory. 



-L 



Save defined labels beginning with an L (the compiler generates these temporary labels). Temporary 
labels are normally discarded to save space in the resulting symbol table. 



-V 



-V 

Print the path and the command-line invocation of the assembler that the assembler driver is usinj 



-w 



-W 

Suppress warnings. 

-dynamic 



-dynami c 

Enables dynamic linking features. This is the default. 

-static 



-static 

Causes the assembler to treat any dynamic linking features as an error. This also causes the .text 
directive to not include the pur e_instruct ions section attribute. 
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Architecture Options 



The program /usr/b in/as is a driver that executes assemblers for specific target architectures. If no 
target architecture is specified, it defaults to the architecture of the host it is running on. 



-arch 



-arch arch_type 

Specifies the target architecture, arch_type, the assembler to be executed and the architecture of the 
resulting object file. The target assemblers for each architecture are in 

/usr/1 i bexec/gcc/darwi n /arch_type/ as or /usr/1 ocal /I i bexec/gcc/darwi n/arch_type/ as. The 
specified target architecture can be processor specific, in which case the resulting object file is marked 
for the specific processor. See then man page a r c h ( 3 ) for the current list of specific processor names 
for the arch option. 



-force_cpusubtype_ALL 



-force_cpusubtype_ALL 

Set the architecture of the resulting object file to the ALL type regardless of the instructions in the 
assembly input. 



-arch_multiple 



-arch_mul ti pi e 

This is used by the c c ( 1 ) driver program when it is run with multiple arc Uarch_type flags and 
instructs programs like a s ( 1 ) that, if it prints any messages, to precede them with one line stating 
the program name — in this case a s — and the architecture (from the arc harch_type flag) to distinguish 
which architecture the error messages refer to. This flag is accepted only by the actual assemblers (in 
/I i b larchjypel as) and not by the assembler driver, /bin/as. 



PowerPC-Specific Options 



The following sections describe the options specific to the PowerPC architecture. 

-no_ppc601 

-no_ppc601 

Treat any PowerPC 601 instructions as an error. 
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-static_branch_prediction_Y_bit 



-stati c_branch_predi cti on_Y_bi t 

Treat a single trailing + or - after a conditional PowerPC branch instruction as a static branch prediction 
that sets the Y bit in the opcode. Pairs of trailing ++ or - - always set the AT bits. This is the default 
for Mac OS X. 



-static_branch_prediction_AT_bits 



-stati c_branch_predi cti on_AT_bi ts 

Treat a single trailing + or - after a conditional Power PC branch instruction as a static branch prediction 
sets the AT bits in the opcode. Pairs of trailing ++ or - - always set the AT bits, but with this option a 
warning is issued if that syntax is used. With this flag the assembler behaves like the IBM tools. 
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CHAPTER 



Assembly Language Syntax 



This chapter describes the basic lexical elements of assembly language programming, and explains 
how those elements combine to form complete assembly language expressions. 

This chapter goes on to explain how sequences of expressions are put together to form the statements 
that make up an assembly language program. 



Elements of Assembly Language 



This section describes the basic building blocks of an assembly language program — these are characters, 
symbols, labels, and constants. 



Characters 



The following characters are used in assembly language programs: 

■ Alphanumeric characters — A through Z, a through z, and through 9 

■ Other printable ASCII characters (such as #, $, :, ., +, -, *, /, !, and I ) 

■ Nonprinting ASCII characters (such as space, tab, return, and newline) 

Some of these characters have special meanings, which are described in "Expression Syntax" (page 
20) and in "Assembly Language Statements" (page 25). 



Identifiers 



An identifier (also known as a symbol) can be used for several purposes: 

■ As the label for an assembler statement (see "Labels" (page 18)) 

■ As a location tag for data 

■ As the symbolic name of a constant 



Elements of Assembly Language 17 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



CHAPTER 2 

Assembly Language Syntax 



Each identifier consists of a sequence of alphanumeric characters (which may include other printable 
ASCII characters such as . , _, and $). The first character must not be numeric. Identifiers may be of 
any length, and all characters are significant. The case of letters is significant — for example, the 
identifier v a r is different from the identifier V a r. 

It is also possible to define an identifier by enclosing multiple identifiers within a pair of double 
quotation marks. For example: 

"Object +new: " : 

. 1 ong "Object +new: " 



Labels 



A label is written as an identifier immediately followed by a colon ( : ). The label represents the current 
value of the current location counter; it can be used in assembler instructions as an operand. 



Note: You may not use a single identifier to represent two different locations. 

Numeric Labels 

Local numeric labels allow compilers and programmers to use names temporarily. A numeric label 
consists of a digit (between and 9) followed by a colon. These 10 local symbol names can be reused 
any number of times throughout the program. As with alphanumeric labels, a numeric label assigns 
the current value of the location counter to the symbol. 

Although multiple numeric labels with the same digit may be used within the same program, only 
the next definition and the most recent previous definition of a label can be referenced: 

■ To refer to the most recent previous definition of a local numeric label, write digit b, (using the 
same digit as when you defined the label). 

■ To refer to the next definition of a numeric label, write digit f. 

The Scope of a Label 

The scope of a label is the distance over which it is visible to (and referenceable by) other parts of the 
program. Normally, a label that tags a location or data is visible only within the current assembly 
unit. 

The . gl obi directive (described in ".globl" (page 48)) maybe used to make a label external. In this 
case, the symbol is visible to other assembly units at link time. 

Constants 

Four types of constants are available: Numeric, character, string, and floating point. All constants are 
interpreted as absolute quantities when they appear in an expression. 
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Numeric Constants 



A numeric constant is a token that starts with a digit. Numeric constants can be decimal, hexadecimal, 
or octal. The following restrictions apply: 

■ Decimal constants contain only digits between and 9, and normally aren't longer than 32 
bits— having a value between -2,147,483,648 and 2,147,483,647 (values that don't fit in 32 
bits are bignums, which are legal but which should fit within the designated format). Decimal 
constants cannot contain leading zeros or commas. 

■ Hexadecimal constants start with Ox (or OX), followed by between one and eight decimal or 
hexadecimal digits (0 through 9, a through f , and A through F). Values that don't fit in 32 bits are 
bignums. 

■ Octal constants start with 0, followed by from one to eleven octal digits (0 through 7). Values that 
don't fit in 32 bits are bignums. 



Character Constants 

A single-character constant consists of a single quotation mark ( ' ) followed by any ASCII character. 
The constant's value is the code for the given character. 



String Constants 



A string constant is a sequence of zero or more ASCII characters surrounded by quotation marks (for 
example, "a string"). 



Floating-Point Constants 



The general lexical form of a floating-point number is: 

0flt_char [{+-}] dec. ..[.][ dec. , . ] [exp_char [{+-}] [dec. . . ]] 
where: 



Item Description 

flt_char A required type specification character (see the following table). 



[{+"!] The optional occurrence of either + or -, but not both. 



dec... A required sequence of one or more decimal digits. 



[.] A single optional period. 



[dec...] An optional sequence of one or more decimal digits. 



[exp_char] An optional exponent delimiter character (see the following table). 



The type specification character, flt_char, specifies the type and representation of the constructed 
number; the set of legal type specification characters with the processor architecture, as shown here: 
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Architecture flt_char 

ppc jdDfF} 



i386 



IfFdDxX} 



exp_char 

{eE} 



(eE| 



When floating-point constants are used as arguments to the .single and .double directives, the type 
specification character isn't actually used in determining the type of the number. For convenience, r 
or R can be used consistently to specify all types of floating-point numbers. 

Collectively, all floating-point numbers, together with quad and octal scalars, are called bignums. 
When a s requires a bignum, a 32-bit scalar quantity may also be used. 

Floating-point constants are internally represented as flonums in a machine-independent, 
precision -independent floating-point format (for accurate cross-assembly). 



Assembly Location Counter 



A single period ( . ), usually referred to as "dot," is used to represent the current location counter. 
There is no way to explicitly reference any other location counters besides the current location counter. 

Even if it occurs in the operand field of a statement, dot refers to the address of the first byte of that 
statement; the value of dot isn't updated until the next machine instruction or assembler directive. 



Expression Syntax 



Expressions are combinations of operand terms (which can be numeric constants or symbolic identifiers 
) and operators. This section lists the available operators, and describes the rules for combining these 
operators with operands in order to produce legal expressions. 



Operators 



Identifiers and numeric constants can be combined, through the use of operators, to form expressions. 
Each operator operates on 64-bit values. If the value of a term occupies less than 64 bits, it is 
sign-extended to a 64-bit value. 

The assembler provides both unary and binary operators. A unary operator precedes its operand; a 
binary operator follows its first operand, and precedes its second operand. For example: 

!var | unary expression 

var+5 | binary expression 



The assembler recognizes the following unary operators: 



Operator 



Description 

Unary minus: The result is the two's complement of the operand. 
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Operator 



Description 

One's complement: The result is the one's complement of the operand. 



Logical negation: The result is zero if the operand is nonzero, and 1 if the operand is zero. 



The assembler recognizes the following binary operators: 



Operator 


Description 


+ 


Addition: The result is the arithmetic addition of the two operands. 


- 


Subtraction: The result is the arithmetic subtraction of the two operands. 


* 


Multiplication: The result is the arithmetic multiplication of the two operands. 


/ 


Division: The result is the arithmetic division of the two operands; this is integer division, 
which truncates towards zero. 


% 


Modulus: The result is the remainder that's produced when the first operand is divided 
by the second (this operator applies only to integral operands). 


» 


Right shift: The result is the value of the first operand shifted to the right, where the 
second operand specifies the number of bit positions by which the first operand is to be 
shifted (this operator applies only to integral operands). This is always an arithmetic shift 
since all operators operate on signed operands. 


« 


Left shift: The result is the value of the first operand shifted to the left, where the second 
operand specifies the number of bit positions by which the first operand is to be shifted 
(this operator applies only to integral operands). 


& 


Bitwise AND: The result is the bitwise AND function of the two operands (this operator 
applies only to integral operands). 


A 


Bitwise exclusive OR: The result is the bitwise exclusive OR function of the two operands 
(this operator applies only to integral operands). 




Bitwise inclusive OR: The result is the bitwise inclusive OR function of the two operands 
(this operator applies only to integral operands). 


< 


Less than: The result is 1 if the first operand is less than the second operand, and zero 
otherwise. 


> 


Greater than: The result is 1 if the first operand is greater than the second operand, and 
zero otherwise. 


<= 


Less than or equal: The result is 1 if the first operand is less than or equal to the second 
operand, and zero otherwise. 


>= 


Greater than or equal: The result is 1 if the first operand is greater than or equal to the 
second operand, and zero otherwise. 


== 


Equal: The result is 1 if the two operands are equal, and zero otherwise. 
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Operator 



Description 

Not equal (same as <>): The result is zero if the two operands are equal, and 1 otherwise. 



Terms 



A term is a part of an expression; it may be: 

■ An identifier. 

■ A numeric constant (its 32-bit value is used). The assembly location counter ( . ), for example, is 
a valid numeric constant. 

■ An expression or term enclosed in parentheses. Any quantity enclosed in parentheses is evaluated 
before the rest of the expression. This can be used to alter the normal evaluation of expressions — for 
example, to differentiate between x * y + z and x * ( y + z ) or to apply a unary operator to 
an entire expression — for example, - ( x * y + z ) . 

■ A term preceded by a unary operator (for example, ~v a r). Multiple unary operators may be used 
in a term (for example, ! ~v a r). 



Expressions 



Expressions are combinations of terms joined together by binary operators. An expression is always 
evaluated to a 32-bit value, but in some situations a different value is used: 

■ If the operand requires a 1-byte value (a .byte directive, for example), the low-order 8 bits of the 
expression are used. 

■ If the operand requires a 16-bit value (a .short directive or a movem instruction, for example), 
the low-order 16 bits of the expression are used. 

All expressions are evaluated using the same operator precedence rules that are used by the C 
programming language. 

When an expression is evaluated, its value is absolute, relocatable, or external, as described below. 

Absolute Expressions 

An expression is absolute if its value is fixed. The following are examples of absolute expressions: 

■ An expression whose terms are constants 

■ An identifier whose value is a constant via a direct assignment statement 

■ Values to which the .set directive is applied 
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Relocatable Expressions 



An expression (or term) is relocatable if its value is fixed relative to a base address but has an offset 
value when it is linked or loaded into memory. For example, all labels of a program defined in 
relocatable sections are relocatable. 

Expressions that contain relocatable terms must add or subtract only constants to their value. For 
example, assuming the identifiers v a r and d a t are defined in a relocatable section of the program, 
the following examples demonstrate the use of relocatable expressions: 



Expression 


Description 


var 


Simple relocatable term. Its value is an offset from the base address of the current 
control section. 


var+5 


Simple relocatable expression. Since the value of v a r is an offset from the base address 
of the current control section, adding a constant to it doesn't change its relocatable 
status. 


var*2 


Not relocatable. Multiplying a relocatable term by a constant invalidates the relocatable 
status of the expression. 


2-var 


Not relocatable. The expression can't be linked by adding v a r's offset to it. 


var-dat+5 


Relocatable expression if both var and d a t are defined in the same section — that is, if 
neither is undefined. This form of relocatable expression is used for 
position-independent code. 



External Expressions 



An expression is external (or global) if it contains an external identifier not defined in the current 
program. In general, the same restrictions on expressions containing relocatable identifiers apply to 
expressions containing external identifiers. An exception is that the expression vardat is incorrect 
when both var and d a t are external identifiers (that is, you cannot subtract two external relocatable 
expressions). Also, you cannot multiply or divide any relocatable expression. 
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Assembly Language Statements 



This chapter describes the assembly language statements that make up an assembly language program. 
This is the general format of an assembly language statement: 

[ label_field ] [ opcode_f i el d [ operand_f i el d ] ] [ comment_f i el d ] 

Each of the depicted fields is described in detail in one of the following sections. 

A line may contain multiple statements separated by the @ character for the PowerPC assembler (and 
a semicolon for the i386 assembler), which may then be followed by a single comment preceded by 
a semicolon for the PowerPC assembler (and a # character for the i386 assembler): 

[ statement [ @ statement ...] ] [ ; comment_f i el d ] 

The following rules apply to the use of whitespace within a statement: 

■ Spaces or tabs are used to separate fields. 

■ At least one space or tab must occur between the opcode field and the operand field. 

■ Spaces may appear within the operand field. 

■ Spaces and tabs are significant when they appear in a character string. 



Label Field 



Labels are identifiers that you use to tag the locations of program and data objects. Each label is 
composed of an identifier and a terminating colon. The format of the label field is: 

identifier: [ identifier: ] ... 

The optional label field may occur only at the beginning of a statement. The following example shows 
a label field containing two labels, followed by a (PowerPC -style) comment: 

var: VAR: ; two labels defined here 

As shown here, letters in identifiers are case sensitive, and both uppercase and lowercase letters may 
be used. 
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Operation Code Field 



The operation code field of an assembly language statement identifies the statement as a machine 
instruction, an assembler directive, or a macro defined by the programmer: 

■ A machine instruction is indicated by an instruction mnemonic. An assembly language statement 
that contains an instruction mnemonic is intended to produce a single executable machine 
instruction. The operation and use of each instruction is described in the manufacturer's user 
manual. 

■ An assembler directive (or pseudo-op) performs some function during the assembly process. It 
doesn't produce any executable code, but it may assign space for data in the program. 

■ Macros are defined with the .macro directive (see ".macro, .endmacro, .macros_on, and 
.macros_off" (page 56) for more information). 

One or more spaces or tabs must separate the operation code field from the following operand field 
in a statement. Spaces or tabs are optional between the label and operation code fields, but they help 
to improve the readability of the program. 



Intel i386 Architecture-Specific Caveats 



i386 instructions can operate on byte, word, or long word data (the last is called "double word" 
by Intel). The desired size is indicated as part of the instruction mnemonic by adding a trailing 

b, w, or 1 : 



Mnemonic 


Description 


b 


Byte (8-bit) data. 


w 


Word (16-bit) data. 


1 


Long word (32-bit) data. 



For instance, a m o v b instruction moves a byte of data, but a m o v w instruction moves a 16-bit word 
of data. 

If no size is specified, the assembler attempts to determine the size from the operands. For example, 
if the 16-bit names for registers are used as operands, a 16-bit operation is performed. When both 
a size specifier and a size-specific register name are given, the size specifier is used. Thus, the 
following are all correct and result in the same operation: 

movw Xbx,%cx 
mov %bx,%cx 

movw %ebx,%ecx 

An i386 operation code can also contain optional prefixes, which are separated from the operation 
code by a slash (/) character. The prefix mnemonics are: 
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Prefix 


Description 


datal6 


Operation uses 16-bit data. 


addrl6 


Operation uses 16-bit addresses. 


1 ock 


Exclusive memory lock. 


wait 


Wait for pending numeric exceptions. 


cs, ds, es, f s, gs, ss 


Segment register override. 


rep, repe, repne 


Repeat prefixes for string instructions. 



More than one prefix may be specified for some operation codes. For example: 

lock/fs/xchgl %ebx,4(%ebp) 

Segment register overrides and the 16-bit data specifications are usually given as part of the 
operation code itself or of its operands. For example, the following two lines of assembly generate 
the same instructions: 

movw %bx,%fs:4(%ebp) 

datal6/fs/movl %bx,4(%ebp) 

Not all prefixes are allowed with all instructions. The assembler does check that the repeat prefixes 
for strings instructions are used correctly but doesn't otherwise check for correct usage. 



Operand Field 



The operand field of an assembly language statement supplies the arguments to the machine 
instruction, assembler directive, or macro. 

The operand field may contain one or more operands, depending on the requirements of the preceding 
machine instruction or assembler directive. Some machine instructions and assembler directives don't 
take any operand, and some take two or more. If the operand field contains more than one operand, 
the operands are generally separated by commas, as shown here: 

[ operand [ , operand ] . . . ] 

The following types of objects can be operands: 

■ Register operands 

■ Register pairs 

■ Address operands 

■ String constants 

■ Floating-point constants 

■ Register lists 
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Expressions 



Register operands in a machine instruction refer to the machine registers of the processor or 
coprocessor. Register names may appear in mixed case. 

Intel 386 Architecture-Specific Caveats 

The Mac OS X assembler orders operand fields for i386 instructions in the reverse order from Intel's 
conventions. Intel's convention is destination first, source second; Mac OS X assembler's convention 
is source first, destination second. Where Intel documentation would describe the Compare and 
Exchange instruction for 32-bit operands as follows: 

CMPXCHG r/m32,r32 # Intel processor manual convention 

The Mac OS X assembler syntax for this same instruction is: 

cmpxchg r32,r/m32 # Mac OS X assembler syntax 

So, an example of actual assembly code for the Mac OS X assembler would be: 

cmpxchg %ebx,(%eax) # Mac OS X assembly code 



Comment Field 



The assembler recognizes two types of comments in source code: 

■ A line whose first nonwhitespace character is the hash character (#) is a comment. This style of 
comment is useful for passing C preprocessor output through the assembler. Note that comments 
of the form: 

# line_number file_name level 
get turned into: 

.line line_number; .file file_name 

This can cause problems when comments of this form that aren't intended to specify line numbers 
precede assembly errors, since the error is reported as occurring on a line relative to that specified 
in the comment. Suppose a program contains these two lines of assembly source: 

# 500 

. var 

If .var hasn't been defined, this fragment results in the following error message: 

var . s : 500 : Unknown pseudo-op: .var 

■ A comment field, appearing on a line after one or more statements. The comment field consists 
of the appropriate comment character and all the characters that follow it on the line: 
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Character 


Description 


'• 


Comment character for PowerPC processors 


# 


Comment character for i386 architecture processors 



An assembly language source line can consist of just the comment field; in this case, it's equivalent 
to using the hash character comment style: 

# This is a comment . 
; This is a comment. 

Note the warning given above for hash character comments beginning with a number. 



Direct Assignment Statements 



This section describes direct assignment statements, which don't conform to the normal statement 
syntax described earlier in this chapter. A direct assignment statement can be used to assign the value 
of an expression to an identifier. The format of a direct assignment statement is: 

identifier = expression 

If expression in a direct assignment is absolute, identifier is also absolute, and it may be treated as a 
constant in subsequent expressions. If expression is relocatable, identifier is also relocatable, and it is 
considered to be declared in the same program section as the expression. 

The use of an assignment statement is analogous to using the .set directive (described in ".set" (page 
51)), except that the . set directive makes the value of the expression absolute. This is used when an 
assembly time constant is wanted for what would otherwise generate a relocatable expression using 
the position independent expression ofsymboll - symbol2. For example, the size of the function is 
needed as one of the fields of the C++ exception information and is set with: 

.set t_foo_size, L_foo_end - _foo 

.long L_foo_size ; size of function _foo 

where a position independent pointer to the function is another field of the C++ exception information 
and is set with: 

.long _foo - . ; position independent pointer to _foo 

where the runtime adds the address of the pointer to its contents to get a pointer to the function. 

Once an identifier has been defined by a direct assignment statement, it may be redefined — its value 
is then the result of the last assignment statement. There are a few restrictions, however, concerning 
the redefinition of identifiers: 

■ Register identifiers may not be redefined. 

■ An identifier that has already been used as a label should not be redefined, since this would 
amount to redefining the address of a place in the program. Moreover, an identifier that has been 
defined in a direct assignment statement cannot later be used as a label. Only the second situation 
produces an assembler error message. 
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This chapter describes assembler directives (also known as pseudo operations, or pseudo-ops), which 
allow control over the actions of the assembler. 



Directives for Designating the Current Section 



The assembler supports designation of arbitrary sections with the .section and . z e r o f i 1 1 directives 
(descriptions appear below). Only those sections specified by a directive in the assembly file appear 
in the resulting object file (including implicit .text directives — see "Built-in Directives" (page 37). 
Sections appear in the object file in the order their directives first appear in the assembly file. When 
object files are linked by the link editor, the output objects have their sections in the order the sections 
first appear in the object files that are linked. See the 1 d ( 1 ) Mac OS X man page for more details. 

Associated with each section in each segment is an implicit location counter, which begins at zero 
and is incremented by 1 for each byte assembled into the section. There is no way to explicitly reference 
a particular location counter, but the directives described here can be used to "activate" the location 
counter for a section, making it the current location counter. As a result, the assembler begins assembling 
into the section associated with that location counter. 

Note: If the - n command-line option isn't used, the ( T EXT, t e x t) section is used by default at the 

beginning of each file being assembled, just as if each file began with the . text directive. 



.section 



SYNOPSIS 

.section segname , sectname [[[ , type ] , attribute ] , sizeof_stub ] 

The .section directive causes the assembler to begin assembling into the section given by segname 
and sectname. A section created with this directive contains initialized data or instructions and is 
referred to as a content section, type and attribute may be specified as described under "Section Types 
and Attributes" (page 32). If type is sy mb o l_s tubs, then the sizeof_stub field must be given as the size 
in bytes of the symbol stubs contained in the section. 
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.zerofill 



SYNOPSIS 

.zerofill segname , sectname [ , symbol name , size [ , al i gn_expressi on ]] 

The .zerofill directive causes symbolname to be created as uninitialized data in the section given 
by segname and sectname, with a size in bytes given by size. A power of 2 between and 15 may be 
given for align_expression to indicate what alignment should be forced on symbolname, which is placed 
on the next expression boundary having the given alignment. See ".align" (page 44) for details. 



Section Types and Attributes 



A content section has a type, which informs the link editor about special processing needed for the 
items in that section. The most common form of special processing is for sections containing literals 
(strings, constants, and so on) where only one copy of the literal is needed in the output file and the 
same literal can be used by all references in the input files. 

A section's attributes record supplemental information about the section that the link editor may use 
in processing that section. For example, the pur e_instruct ions attribute indicates that a section 
contains only valid machine instructions. 

A section's type and attribute are recorded in a Mach-O file as the flags field in the section header, 
using constants defined in the header file macho/loader. h. The following sections describe the 
various types and attributes by the names used to identify them in a .section directive. The name 
of the related constant is also given in parentheses following the identifier. 



Type Identifiers 



The following sections describe section type identifiers. 
regular (S_REGULAR) 



A r e g u 1 a r section may contain any kind of data and gets no special processing from the link editor. 
This is the default section type. Examples of regul a r sections include program instructions or 
initialized data. 



cstring_literals(S_CSTRING_LITERALS) 



A cstring_l iteral s section contains null-terminated literal C language character strings. The link 
editor places only one copy of each literal into the output file's section and relocates references to 
different copies of the same literal to the one copy in the output file. There can be no relocation entries 
for a section of this type, and all references to literals in this section must be inside the address range 
for the specific literal being referenced. The last byte in a section of this type must be a null byte, and 
the strings can't contain null bytes in their bodies. An example of a cstring_l iteral s section is one 
for the literal strings that appear in the body of an ANSI C function where the compiler chooses to 
make such strings read only. 
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4byte_literals(S_4BYTE_LITERALS) 



A 4 by te_l i teral s section contains 4-byte literal constants. The link editor places only one copy of 
each literal into the output file's section and relocates references to different copies of the same literal 
to the one copy in the output file. There can be no relocation entries for a section of this type, and all 
references to literals in this section must be inside the address range for the specific literal being 
referenced. An example of a 4 by te_l i teral s section is one in which single-precision floating-point 
constants are stored for a RISC machine (these would normally be stored as immediates in CISC 
machine code). 



8byte_literals(S_8BYTE_LITERALS) 



An 8 by t e_l i t e r a 1 s section contains 8-byte literal constants. The link editor places only one copy of 
each literal into the output file's section and relocates references to different copies of the same literal 
to the one copy in the output file. There can be no relocation entries for a section of this type, and all 
references to literals in this section must be inside the address range for the specific literal being 
referenced. An example of a 8 by t e_l i t e r a 1 s section is one in which double-precision floating-point 
constants are stored for a RISC machine (these would normally be stored as immediates in CISC 
machine code). 



literal_pointers(S_LITERAL_POINTERS) 



A li teral _po inters section contains 4-byte pointers to literals in a literal section. The link editor 
places only one copy of a pointer into the output file's section for each pointer to a literal with the 
same contents. The link editor also relocates references to each literal pointer to the one copy in the 
output file. There must be exactly one relocation entry for each literal pointer in this section, and all 
references to literals in this section must be inside the address range for the specific literal being 
referenced. The relocation entries can be external relocation entries referring to undefined symbols 
if those symbols identify literals in another object file. An example of a 1 iteral_po inters section is 
one containing selector references generated by the Objective-C compiler. 



symbol_stubs (S_SYMBOL_STUBS) 



A symbol_stubs section contains symbol stubs, which are sequences of machine instructions (all the 
same size) used for lazily binding undefined function calls at runtime. If a call to an undefined function 
is made, the compiler outputs a call to a symbol stub instead, and tags the stub with an indirect symbol 
that indicates what symbol the stub is for. On transfer to a symbol stub, a program executes instructions 
that eventually reach the code for the indirect symbol associated with that stub. Here's a sample of 
assembly code based on a function f u n c ( ) containing only a call to the undefined function f o o ( ) : 

. text 

.align 2 

.globl _func 
_f unc : 

b L_too$stub 

. symbol_stub 
L_foo$stub: ; 

. i ndi rect_symbol _foo ; 

lis rll , ha 16 ( L_f oo$l azy_ptr) 

Iwz rl2,lol6(L_foo$lazy_ptr)(rll) 

mtctr r 1 2 

add i rll,rll,lol6( L_foo$l azy_ptr ) 

bctr 

. 1 azy_symbol_poi nter 



the symbol stub 
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L_f oo$l azy_ptr : 

. i ndi rect_symbol _foo 

.long dyl d_stub_bi ndi ng_hel per 



the symbol pointer 

to be replaced by _foo's address 



The symbol-stub sections in the IA-32 architecture — instead of using a stub and a lazy pointer — use 
one branch instruction that specifies the target. This is the corresponding IA-32 assembly code: 

. text 

.align 2 

.globl _func 
_f unc : 

pus h 1 %ebp 

movl %esp, %ebp 

subl $8, %esp 

call L_foo$stub 

1 eave 

ret 

. symbol_stub 
L_foo$stub : 

. i ndi rect_symbol _foo 

hit ; hit ; hit ; hit ; hit 

In the assembly code, _f u n c branches to L_foo$stub, which is responsible for finding the definition 
of the function f oo( ). On PPC (and PPC64), L_f oo$stub jumps to the contents of L_foo$l azy_ptr. 
This value is initially the address of the dyl d_stub_bi ndi ng_hel per code, which after executing 
causes it to overwrite the contents of L_f oo$ 1 a zy_pt r with the address of the real function, _f oo, 
and jump to _foo. 

On IA-32, the branch instruction points to the dynamic linker. The first time the stub is called, the 
dynamic linker modifies the instruction so that it jumps to the real function in subsequent calls. 

The indirect symbol entries for _f o o provide information to the static and dynamic linkers for binding 
the symbol stub. Each symbol stub and lazy pointer entry must have exactly one such indirect symbol, 
associated with the first address in the stub or pointer entry. See ".indirect_symbol" (page 48) for 
more information. 

The static link editor places only one copy of each stub into the output file's section for a particular 
indirect symbol, and relocates all references to the stubs with the same indirect symbol to the stub in 
the output file. Further, the static link editor eliminates a stub if it determines that the target is in the 
same linkage unit and doesn't need redirecting at runtime. No global symbols can be defined in 

symbol_stubs sections. 

On PPC, the stub can refer only to itself, one lazy symbol pointer (referring to the same indirect symbol 
as the stub), and the dyl d_s t u b_b i n d i n g_h e 1 p e r ( ) function. 

lazy_symbol_pointers(S_LAZY_SYMBOL_POINTERS) 

A 1 azy_symbol_poi nters section contains 4-byte symbol pointers that eventually contain the value 
of the indirect symbol associated with the pointer. These pointers are used by symbol stubs to lazily 
bind undefined function calls at runtime. A lazy symbol pointer initially contains an address in the 
symbol stub of instructions that cause the symbol pointer to be bound to the function definition (in 
the example in "symbol_stubs (S_SYMBOL_STUBS)" (page 33), the lazy pointer L_f oo$ 1 a zy_pt r 
initially contains the address for dyl d_s t u b_b i n d i n g_h e 1 p e r but gets overwritten with the address 
for _foo). The dynamic link editor binds the indirect symbol associated with the lazy symbol pointer 
by overwriting it with the value of the symbol. 
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The static link editor places a copy of a lazy pointer in the output file only if the corresponding symbol 
stub is in the output file. Only the corresponding symbol stub can make a reference to a lazy symbol 
pointer, and no global symbols can be defined in this type of section. There must be one indirect 
symbol associated with each lazy symbol pointer. An example of a 1 azy_symbol_poi nters section 
is one in which the compiler has generated calls to undefined functions, each of which can be bound 
lazily at the time of the first call to the function. 

non_lazy_symbol_pointers(S_NON_LAZY_SYMBOL_POINTERS) 

A non_l azy_symbo1_poi nters section contains 4-byte symbol pointers that contain the value of the 
indirect symbol associated with a pointer that may be set at any time before any code makes a reference 
to it. These pointers are used by the code to reference undefined symbols. Initially these pointers have 
no interesting value but get overwritten by the dynamic link editor with the value of the symbol for 
the associated indirect symbol before any code can make a reference to it. 

The static link editor places only one copy of each non-lazy pointer for its indirect symbol into the 
output file and relocates all references to the pointer with the same indirect symbol to the pointer in 
the output file. The static link editor further can fill in the pointer with the value of the symbol if a 
definition of the indirect symbol for that pointer is present in the output file. No global symbols can 
be defined in this type of section. There must be one indirect symbol associated with each non-lazy 
symbol pointer. An example of a non_1 azy_symbol_poi nters section is one in which the compiler 
has generated code to indirectly reference undefined symbols to be bound at runtime — this preserves 
the sharing of the machine instructions by allowing the dynamic link editor to update references 
without writing on the instructions. 

Here's an example of assembly code referencing an element in the undefined structure. The 
corresponding C code would be: 

struct s { 

i nt memberl , member2 ; 
1; 

extern struct s bar; 
i nt f u n c ( ) 
( 

return( bar .member2) ; 
} 

The PowerPC assembly code might look like this: 

. text 

.align 2 

.globl _func 
_f unc : 

lis r3 , ha 16 ( t_bar$non_l azy_ptr ) 

1 wz r2 , 1 ol6( t_bar$non_l azy_ptr ) ( r3) 

Iwz r3,4(r2) 

blr 

. non_l azy_symbol_poi nter 
t_bar$non_l azy_ptr : 

. i ndi rect_symbol _bar 

. 1 ong 
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mod_init_funcs(S_MOD_INIT_FUNC_POINTERS) 



A mod_i ni t_f uncs section contains 4-byte pointers to functions that are to be called just after the 
module containing the pointer is bound into the program by the dynamic link editor. The static link 
editor does no special processing for this section type except for disallowing section ordering. This 
is done to maintain the order the functions are called (which is the order their pointers appear in the 
original module). There must be exactly one relocation entry for each pointer in this section. An 
example of a mod_i ni t_f uncs section is one in which the compiler has generated code to call C++ 
constructors for modules that get dynamically bound at runtime. 



mod_term_funcs(S_MOD_TERM_FUNC_POINTERS) 



A mod_term_f uncs section contains 4-byte pointers to functions that are to be called just before the 
module containing the pointer is unloaded by the dynamic link editor or the program is terminated. 
The static link editor does no special processing for this section type except for disallowing section 
ordering. This is done to maintain the order the functions are called (which is the order their pointers 
appear in the original module). There must be exactly one relocation entry for each pointer in this 
section. An example of a mod_term_f uncs section is one in which the compiler has generated code 
to call C++ destructors for modules that get dynamically bound at runtime. 



coalesced (S_COALESCED) 



Acoalesced section can contain any instructions or data and is used when more than one definition 
of a symbol could be defined in multiple object files being linked together. The static link editor keeps 
the data associated with the coalesced symbol from the first object file it links and silently discards 
the data from other object files. An example of a coalesced section is one in which the compiler has 
generated code for implicit instantiations of C++ templates. 



Attribute Identifiers 



The following sections describe attribute identifiers. 
none (0) 



No attributes for this section. This is the default section attribute. 
S ATTR SOME INSTRUCTIONS 



This attribute is set by the assembler whenever it assembles a machine instruction in a section. There 
is no directive associated with it, since you cannot set it yourself. It is used by the dynamic link editor 
together with S_ATTR_EXT_RELOC and S_ATTR_L0C_REL0C, set by the static link editor, to know it 
must flush the cache and other processor-related functions when it relocates instructions by writing 
on them. 



no_dead_strip(S_ATTR_NO_DEAD_STRIP) 



The n o_d e a d_s t r i p section attribute specifies that a particular section must not be dead-stripped. 
See "Directives for Dead-Code Stripping" (page 51) for more information. 
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nojoc (S_ATTR_NO_TOC) 



The n o_t o c section attribute means that the global symbols in this section are not to be used in the 
table of contents of a static library as produced by the program rani i b ( 1 ) . This is normally used 
with a coalesced section when it is expected that each object file has a definition of the symbols that 
it uses. 



live_support(S_ATTR_LIVE_SUPPORT) 



The live_support section attribute specifies that a section's blocks must not be dead-stripped if they 
reference code that is live, but the reference is undetectable. See "Directives for Dead-Code 
Stripping" (page 51) for more information. 



pure_instructions(S_ATTR_PURE_INSTRUCTIONS) 



The pur e_instruct ions attribute means that this section contains nothing but machine instructions. 

This attribute would be used for the ( TEXT , text) section of Mac OS X compilers and sections 

that have a section type of symbol _s tubs. 



strip_static_syms(S_ATTR_STRIP_STATIC_SYMS) 



The stri p_stati c_syms section attribute means that the static symbols in this section can be stripped 
from linked images that are used with the dynamic linker when debugging symbols are also stripped. 
This is normally used with a c o a 1 e s c e d section that has private extern symbols, so that after linking 
and the private extern symbols have been turned into static symbols they can be stripped to save 
space in the linked image. 

self_modifying_code(S_ATTR_SELF_MODIFYING_CODE) 

The sel f_modi fyi ng_code section attribute identifies a section with code that can be modified by 
the dynamic linker. For example, IA-32 symbol stubs are implemented as branch instructions that 
initially point to the dynamic linker but are modified by the dynamic linker to point to the real symbol. 



Built-in Directives 



The directives described here are simply built-in equivalents for .section directives with specific 
arguments. 



Designating Sections in the TEXT Segment 



The directives listed below cause the assembler to begin assembling into the indicated section of the 

T EXT segment. Note that the underscore before T EXT, t e x t, and the rest of the segment names 

is actually two underscore characters. 



Directive 


Section 


.text 


(__TEXT text) 


. const 


(_TEXT const) 
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Directive 


Section 


. stati c_const 


( TEXT, stati c_const) 


. c s t r i n g 


( TEXT, cstri ng) 


.1 iteral4 


(__TEXT 1 iteral 4) 


.literal 8 


(_TEXT 1 iteral 8) 


. constructor 


( TEXT, constructor) 


.destructor 


( TEXT, destructor) 


. fvml i b_i ni tO 


(_TEXT fvml i b_i ni tO) 


. fvml i b_i ni tl 


(__TEXT fvmlib_initl) 


. symbol_stub 


( TEXT, symbol_stubl or TEXT, jump_tabl e) 


. pi csymbol_stub 


( TEXT, pi csymbol stubl or TEXT, pi csymbol_stub) 



The following sections describe the sections in the T EXT segment and the types of information that 

should be assembled into each of them. 

.text 

This is equivalent to .section TEXT, text , regul ar , pure_i nstructions when the default 

-dynami c flag is in effect and equivalent to .section TEXT, text , regul a r when the -static 

flag is specified. 

The compiler places only machine instructions in the ( TEXT , text) section (no read-only data, 

jump tables or anything else). With this, the entire ( TEXT , text) section is pure instructions and 

tools that operate on object files. The runtime can take advantage of this to locate the instructions of 
the program and not get confused with data that could have been mixed in. To make this work, all 
runtime support code linked into the program must also obey this rule (all Mac OS X library code 
follows this rule). 

.const 

This is equivalent to .section TEXT, const 

The compiler places all data declared const and all jump tables it generates for switch statements in 
this section. 

.static_const 

This is equivalent to .section TEXT, stati c_const 

This is not currently used by the compiler. It was added to the assembler so that the compiler may 
separate global and static const data into separate sections if it wished to. 
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.cstring 

This is equivalent to . s e c t i o n TEXT, cstring, cstri ng_1 i teral s 

This section is marked with the section type c s t r i n g_l i t e r a 1 s, which the link editor recognizes. 
The link editor merges the like literal C strings in all the input object files to one unique C string in 
the output file. Therefore this section must contain only C strings (a C string in a sequence of bytes 
that ends in a null byte, \ 0, and does not contain any other null bytes except its terminator). The 
compiler places literal C strings found in the code that are not initializers and do not contain any 
embedded nulls in this section. 

.Iiteral4 

This is equivalent to .section TEXT, 1 i teral 4,4byte_l i teral s 

This section is marked with the section type 4by te_l i teral s, which the link editor recognizes. The 
link editor can then merge the like 4 byte literals in all the input object files to one unique 4 byte literal 
in the output file. Therefore, this section must contain only 4 byte literals. This is typically intended 
for single precision floating-point constants and the compiler uses this section for that purpose. On 
some machines it is more efficient to place these constants in line as immediates as part of the 
instruction. 

.Iiteral8 

This is equivalent to . secti on TEXT , 1 i teral 8 , 8byte_l i teral s 

This section is marked with the section type 8by te_l i teral s, which the link editor recognizes. The 
link editor then can merge the like 8 byte literals in all the input object files to one unique 8 byte literal 
in the output file. Therefore, this section must only contain 8 byte literals. This is typically intended 
for double precision floating-point constants and the compiler uses this section for that purpose. On 
some machines it is more efficient to place these constants in line as immediates as part of the 
instruction. 

.constructor 

This is equivalent to .section TEXT, constructor 

.destructor 

This is equivalent to .section TEXT, destructor 

The .constructor and .destructor sections are used by the C++ runtime system, and are reserved 
exclusively for the C++ compiler. 

.fvmlib_initO 

This is equivalent to .section TEXT, f vml i b_i n i tO 

.fvmlib_init1 

This is equivalent to .section TEXT, f vml i b_i ni tl 
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The . f vml i b_i ni tO and . f vml i b_i ni tl sections are used by the obsolete fixed virtual memory 
shared library initialization. The compiler doesn't place anything in these sections, as they are reserved 
exclusively for the obsolete shared library mechanism. 



.symbol_stub 



This section is of type symbol _s tubs and has the attribute pure_i nstructions. The compiler places 
symbol stubs in this section for undefined functions that are called in the module. This is the standard 
symbol stub section for nonposition-independent code. 

Symbol stubs are implemented differently on PPC (and PPC64) and on IA-32. The following sections 
describe each implementation. 

PowerPC 

On PowerPC (PPC and PPC64), . symbol _s tub is equivalent to .section TEXT, symbol_stubl , 

symbol_stubs , pure_i nstructi ons , 20. 

The standard symbol stub on PPC and PPC64 is 20 bytes and has an alignment of 4 bytes (.align 2). 
For example, a stub for the symbol _f oo would be (using a lazy symbol pointer L_f oo$l azy_ptr): 

. symbol_stub 
L_foo$stub : 

. i ndi rect_symbol _foo 

lis rll , ha 16 ( L_f oo$l azy_ptr) 

Iwz rl2,lol6(L_foo$lazy_ptr)(ril) 

mtctr rl 2 

add i rll,rll,lol6( L_f oo$l azy_ptr) 

bctr 

. 1 azy_symbol_poi nter 
L_foo$l azy_ptr : 

. i ndi rect_symbol _foo 

.long dyl d_stub_bi ndi ng_hel per 

IA-32 

OnIA-32, . symbol_stub is equivalent to .section IMPORT, jump_table, symbol_stubs , 

sel f_modi fyi ng_code + pune_i nstnucti ons , 5. 

On IA-32 this section has an additional attribute, sel f_modi fyi ng_code, which specifies that the 
code in this section can be modified at runtime. At runtime, the dynamic linker uses this feature in 
IA-32 stubs to change the branch instruction in the stub so that it jumps to the real symbol instead of 
their initial target, the dynamic linker itself. This is an example of a symbol stub of the _f oo symbol: 

. symbol_stub 
L_foo$stub : 

. i ndi rect_symbol _foo 

hit ; hit ; hit ; hit ; hit 

.picsymbol_stub 

In PowerPC, this directive translates to . section TEXT, pi csymbol stubl , symbol_stubs , 

pune_i nstnucti ons , NBYTES. 
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This section is of type symbol _s tubs and has the attribute pure_i nstructions. The compiler places 
symbol stubs in this section for undefined functions that are called in the module. This is the standard 
symbol stub section for position-independent code. The value of N BYTES is dependent on the target 
architecture. 

The standard position-independent symbol stub for the PowerPC is 36 bytes and has an alignment 
of 4 bytes (.align 2). For example, a stub for thesymbol _f o o would be (using a lazy symbol pointer 

L_foo$l azy_ptr): 

. pi csymbol_stub 
L_f oo$ stub: 

. i ndi rect_symbol _foo 

mf 1 r rO 

bcl 20,31, L0$_foo 
L0$_foo: 

mf 1 r rll 

addis rll,rll,hal6(L_foo$lazy_ptr - L0$_foo) 

mtl r rO 

Iwz rl2,lol6(L_foo$lazy_ptr - L0$_foo) ( rll ) 

mtctr r 1 2 

addi rll , rll ,lol6( L_foo$lazy_ptr - L0$_foo) 

bctr 



Designating Sections in the DATA Segment 



These directives cause the assembler to begin assembling into the indicated section of the DATA 

segment: 



Directive 


Section 


.data 


(_DATA, data) 


. s t a t i c_d a t a 


( DATA, static_data) 


. non_l azy_symbol_poi nter 


( DATA, nl_symbol_poi nter) 


■ 1 azy_symbol_poi nter 


( DATA, 1 a_symbol_poi nter) 


■ dyld 


(_DATA,_dyld) 


.mod_i ni t_f unc 


( DATA , mod_i ni t_f unc) 


.mod_term_f unc 


( DATA , mod_term_f unc) 


. const_data 


( DATA, const) 



The following sections describe the sections in the DATA segment and the types of information that 

should be assembled into each of them. 

.data 

This is equivalent to .sect i on DATA, data 

The compiler places all non-const initialized data (even initialized to zero) in this section. 
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.static data 



This is equivalent to .sect i on DATA, static_data 

This is not currently used by the compiler. It was added to the assembler so that the compiler could 
separate global and static data symbol into separate sections if it wished to. 

.const_data 

This is equivalent to . s e c t i o n DATA, const, regular. 

This section is of type regular and has no attributes. This section is used when dynamic code is being 
compiled for const data that must be initialized. 

.lazy_symbol_ptr 

This is equivalent to .secti on DATA , 1 a_symbo1_ptr , 1 azy_symbo1_poi nters 

This section is of type 1 azy_symbol_poi nters and has no attributes. The compiler places a lazy 
symbol pointer in this section for each symbol stub it creates for undefined functions that are called 
in the module. (See ".symbol_stub" (page 40) for examples.) This section has an alignment of 4 bytes 
(.align 2). 

.non_lazy_symbol_ptr 

This is equivalent to .section DATA, nl_symbol_ptr , non_l azy_symbol_poi nters 

This section is of type non_l azy_symbol_poi nters and has no attributes. The compiler places a 
non-lazy symbol pointer in this section for each undefined symbol referenced by the module (except 
for function calls). This section has an alignment of 4 bytes (.align 2). 

.mod_init_func 

This is equivalent to . s e c t i o n DATA, mod_i ni t_f unc , mod_i ni t_f uncs 

This section is of type mod_i ni t_f uncs and has no attributes. The C++ compiler places a pointer to 
a function in this section for each function it creates to call the destructors (if the module has them). 

.mod_term_func 

This is equivalent to . s e c t i o n DATA, mod_term_f unc , mod_term_f uncs 

This section is of type mod_term_funcs and has no attributes. The C++ compiler places a pointer to 
a function in this section for each function it creates to call the destructors (if the module has them). 

.dyld 

This is equivalent to . s e c t i o n DATA, dyld, regular 

This section is of type regular and has no attributes. This section is used by the dynamic link editor. 
The compiler doesn't place anything in this section, as it is reserved exclusively for the dynamic link 
editor. 
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Designating Sections in the OBJC Segment 



These directives cause the assembler to begin assembling 
segment (or the TEXT segment): 



into the indicated section of the OBJC 



Directive 


Section 


• objc_cl ass 


(_0BJC, class) 


. objc_meta_cl ass 


( OBJC , meta_cl ass) 


• objc_cat_cl s_meth 


( OBJC , cat_cl s_meth) 


■ objc_cat_i nst_meth 


( OBJC , cat_i nst_meth) 


• objc_protocol 


( OBJC , protocol) 


■ objc_stri ng_object 


( OBJC , stri ng_object) 


• objc_cl s_meth 


(__0BJC, cls_meth) 


• objc_i nst_meth 


( OBJC , i nst_meth) 


• objc_cl s_ref s 


(_0BJC, cls_refs) 


. objc_message_ref s 


( OBJC , message_ref s) 


■ objc_symbol s 


(_0BJC, symbols) 


■ objc_category 


( OBJC , category) 


• objc_cl ass_vars 


( OBJC , cl ass_vars) 


. objc_i nstance_vars 


( OBJC , i nstance_vars) 


. objc_modul e_i nfo 


( OBJC , modul e_i nfo) 


• objc_cl ass_names 


( TEXT, cstri ng) 


. objc_meth_var_types 


( TEXT, cstri ng) 


. objc_meth_var_names 


( TEXT, cstri ng) 


■ objc_sel ector_strs 


( OBJC , sel ector_strs) 



All sections in the OBJC segment, including old sections that are no longer used and future sections 

that may be added, are exclusively reserved for the Objective-C compiler's use. 



Directives for Moving the Location Counter 



This section describes directives that advance the location counter to a location higher in memory. 
They have the additional effect of setting the intervening memory to some value. 
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.align 



SYNOPSIS 

align al i gn_expressi on [ 

p2align al i gn_expressi on [ 

p2alignw al i gn_expressi on [ 

p2alignl al i gn_expressi on [ 

a 1 i g n 3 2 al i gn_expressi on [ 



lbyte_f i ll_expression [ , max_bytes_to_f i 

lbyte_f i ll_expression [ , max_bytes_to_f i 

2byte_f i ll_expression [ ,max_bytes_to_f i 

4byte_f i ll_expression [ , max_bytes_to_f i 

4byte_f i 1 l_expressi on [ ,max_bytes_to_f i 



II]] 
II]] 
II]] 
II]] 
II]] 



The align directives advance the location counter to the next align _expression boundary, if it isn't 
currently on such a boundary. align_expression is a power of 2 between and 15 (for example, the 
argument of . a 1 i gn 3 means 2 A 3 (8)-byte alignment). The fill expression, if specified, must be 
absolute. The space between the current value of the location counter and the desired value is filled 
with the fill expression (or with zeros, if fill ^expression isn't specified). The space between the current 
value of the location counter to the alignment of the fill expression width is filled with zeros first. 
Then the fill expression is used until the desired alignment is reached, max _bytes_to Jill is the maximum 
number of bytes that are allowed to be filled for the align directive. If the align directive can't be done 
in max _bytes_to Jill or less, it has no effect. If there is no fill ^expression and the section has the 
pur e_i n s t r u c t ions attribute, or contains some instructions, the nop opcode is used as the fill 
expression. 

Note: The assembler enforces no alignment for any bytes created in the object file (data or machine 
instructions). You must supply the desired alignment before any directive or instruction. 

EXAMPLE 

.align 3 

one : . doubl e Orl . 



•org 

SYNOPSIS 

.org expression [ , fill _express ion ] 

The .org directive sets the location counter to expression, which must be a currently known absolute 
expression. This directive can only move the location counter up in address. The fill expression, if 
specified, must be absolute. The space between the current value of the location counter and the 
desired value is filled with the low-order byte of the fill expression (or with zeros, if fill_expression 
isn't specified). 



Note: If the output file is later link-edited, the .org directive isn't preserved. 



EXAMPLE 

.org 0x100, Oxff 
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Directives for Generating Data 



The directives described in this section generate data. (Unless specified otherwise, the data goes into 
the current section.) In some respects, they are similar to the directives explained in "Directives for 
Moving the Location Counter" (page 43) — they do have the effect of moving the location counter — but 
this isn't their primary purpose. 



.ascii and .asciz 



SYNOPSIS 

.ascii [ "string" ] [ , "string" ] ... 
.asciz [ "string" ] [ , "string" ] ... 

These directives translate character strings into their ASCII equivalents for use in the source program. 
Each directive takes zero or more comma-separated strings surrounded by quotation marks. Each 
string can contain any character or escape sequence that can appear in a character string; the newline 
character cannot appear, but it can be represented by the escape sequence \ 1 2 or \ n : 

■ The .ascii directive generates a sequence of ASCII characters. 

■ The .asciz directive is similar to the .ascii directive, except that it automatically terminates 
the sequence of ASCII characters with the null character (\ 0), necessary when generating strings 
usable by C programs. 

If no strings are specified, the directive is ignored. 

EXAMPLE 

.ascii "Can't open the DSP.\0" 
.asciz "%s has changes . \tSave them?" 



.byte, .short, .long, and .quad 



SYNOPSIS 

.byte [ expression ] [ , expression ] ... 
.short [ expression ] [ , expression ] ... 
.long [ expression ] [ , expression ] ... 
.quad [ expression ] [ , expression ] ... 

These directives reserve storage locations in the current section and initialize them with specified 
values. Each directive takes zero or more comma-separated absolute expressions and generates a 
sequence of bytes for each expression. The expressions are truncated to the size generated by the 
directive: 

■ .byte generates 1 byte per expression. 

■ .short generates 2 bytes per expression. 

■ .long generates 4 bytes per expression. 
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■ .quad generates 8 bytes per expression. 
EXAMPLE 



.byte 74,0112,0x4A,0x4a, ' J | the same byte 

.short 64206, 0175316, Oxface j the same short 

.long -1234, 037777775456, 0xfffffb2e j the same long 

.quad -1234, 01777777777777777775456, Oxf f f f f f f f f f f f f b2e j the same quad 



Note: The .quad directive doesn't handle a relocatable expression of the form .quad foo - bar 
when the values of foo or bar are more than 32 bits. 



.comm 



SYNOPSIS 



.comm name, size 



The . comm directive creates a common symbol named name of size bytes. If the symbol isn't defined 
elsewhere, its type is "common." 

The link editor allocates storage for common symbols that aren't otherwise defined. Enough space is 
left after the symbol to hold the maximum size (in bytes) seen for each symbol in the 

( DATA , common) section. 

The link editor aligns each such symbol (based on its size aligned to the next greater power of two) 

to the maximum alignment of the ( DATA , common) section. For information about how to change 

the maximum alignment, see the description of - s e c t a 1 i g n in the 1 d ( 1 ) Mac OS X man page. 

EXAMPLE 

.comm _gl obal_uni ni ti al i zed ,4 



.fill 

SYNOPSIS 

.fill repeat_expressi on , fill_size , f i 1 l_expressi on 

The .fill directive advances the location counter by repeat ^expression times fill _size bytes: 

■ fill_size is in bytes, and must have the value 1, 2, or 4 

■ repeat ^expression must be an absolute expression greater than zero 

■ fill_expression may be any absolute expression (it gets truncated to the fill size) 

EXAMPLE 

.fill 69 ,4 , Oxfeadf ace | put out 69 Oxfeadface's 
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.lcomm 



SYNOPSIS 

.lcomm name, size [ , align ] 

The . 1 comm directive creates a symbol named name of size bytes in the ( DATA , bss) section. It 

contains zeros at execution. The name isn't declared as global, and hence is unknown outside the 
object module. 

The optional align expression, if specified, causes the location counter to be rounded up to an align 
power-of-two boundary before assigning the location counter to the value of name. 

EXAMPLE 

.lcomm abyte.l | or: .lcomm abyte,l,0 

.lcomm pad ding, 7 

.lcomm adouble,8 | or: .lcomm adouble,8,3 

These are the same as: 

.zerofill DATA, bss,abyte,l 

.lcomm DATA, bss , paddi ng , 7 

.lcomm DATA, bss , adoubl e , 8 



.single and .double 



SYNOPSIS 

.single [ number ] [ , number ] ... 
.double [ number ] [ , number ] ... 

These directives reserve storage locations in the current section and initialize them with specified 
values. Each directive takes zero or more comma-separated decimal floating-point numbers: 

■ .single takes IEEE single-precision floating point numbers. It reserves 4 bytes for each number 
and initializes them to the value of the corresponding number. 

■ .double takes IEEE double-precision floating point numbers. It reserves 8 bytes for each number 
and initializes them to the value of the corresponding number. 

EXAMPLE 

.single 3 . 33333333333333310000e-01 
.double 0.00000000000000000000e+00 
.single + 1 n f i n i ty 
.double -Infinity 
.single NaN 



.space 



SYNOPSIS 
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.space num_bytes [ , f i 1 l_expressi on ] 



The .space directive advances the location counter by num_bytes, where num_bytes is an absolute 
expression greater than zero. The fill expression, if specified, must be absolute. The space between 
the current value of the location counter and the desired value is filled with the low-order byte of the 
fill expression (or with zeros, if fill_expression isn't specified). 



EXAMPLE 

ten_ones : 



.space 10,1 



Directives for Dealing With Symbols 



This section describes directives that have an effect on symbols and the symbol table. 



.globl 



SYNOPSIS 

.globl symbol_name 

The .globl directive makes symbol _name external. If symbol _name is otherwise defined (by .set or 
by appearance as a label), it acts within the assembly exactly as if the .globl statement was not given; 
however, the link editor may be used to combine this object module with other modules referring to 
this symbol. 

EXAMPLE 

.globl abs 

.set abs , 1 

. gl obi var 
var : .1 ong 2 



. indirect_sy mb ol 



SYNOPSIS: 

. i ndi rect_symbol symbol_name 

The . i ndi rect_symbol directive creates an indirect symbol withsymbol_name and associates the 
current location with the indirect symbol. An indirect symbol must be defined immediately before 
eachitemina symbol_stub , 1 azy_symbol_poi nters , and non_l azy_symbol_poi nters section. 
The static and dynamic linkers usesymbol_name to identify the symbol associated with the item 
following the directive. 
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.reference 



SYNOPSIS 

.reference symbol_name 

The . reference directive causes symbol _name to be an undefined symbol present in the output file's 
symbol table. This is useful in referencing a symbol without generating any bytes to do it (used, for 
example, by the Objective-C runtime system to reference superclass objects). 

EXAMPLE 

.reference . objc_cl ass_name_Object 



.weak reference 



SYNOPSIS 

.weak_reference symbol_name 

The . wea k_ref erence directive causes symbol _name to be a weak undefined symbol present in the 
output file's symbol table. This is used by the compiler when referencing a symbol with the 
weak_import attribute. 

EXAMPLE 

.wea preference . objc_cl ass_name_Object 



.lazy_ref erence 



SYNOPSIS 

. 1 azy_reference symbol_name 

The . 1 azy_ref erence directive causes symbol_name to be a lazy undefined symbol present in the 
output file's symbol table. This is useful when referencing a symbol without generating any bytes to 
do it (used, for example, by the Objective-C runtime system with the dynamic linker to reference 
superclass objects but allow the runtime to bind them on first use). 

EXAMPLE 

. 1 a zy_ref erence . objc_cl ass_name_Object 



.weak definition 



SYNOPSIS 

.weak_def i ni ti on symbol_name 
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The . weak_def i ni ti on directive causes symbol _name to be a weak definition, symbol _name can be 
defined only inacoalesced section. This is used by the C++ compiler to support template instantiation. 
The compiler uses acoalesced section with the . w e a k_d e f i n i t i o n directive for implicitly instantiated 
templates. And it uses a regular section ( . text , . data, a so on) for an explicit template instantiation. 



.private_extern 



SYNOPSIS: 

. pri vate_extern symbol_name 

The .pri vate_extern directive makes symbol _name a private external symbol. When the link editor 
combines this module with other modules (and the -keep_pri vate_externs command-line option 
is not specified) the symbol turns it from global to static. If both .private_extern and . g 1 o b 1 
assembler directives are used on the same symbol, the effect is as if only the .private_extern directive 
was used. 



.stabs, .stabn, and .stabd 



SYNOPSIS 

.stabs n_name , n_type , n_other , n_desc , n_value 
.stabn n_type , n_other , n_desc , n_value 
.stabd n_type , n_other , n_desc 

These directives are used to place symbols in the symbol table for the symbolic debugger (a "stab" 
is a symbol table entry). 

■ .stabs specifies all the fields in a symbol table entry. n_name is the name of a symbol; if the 
symbol name is null, the .stabn directive may be used instead. 

■ . s t a b n is similar to . stabs, except that it uses a NULL ("") name. 

■ . s t a b d is similar to .stabn, except that it uses the value of the location counter ( . ) as the njvalue 
field. 



Note: The n_other field of a .stabs directive is ignored, and the value of the n_sect field (what was 
the n_other field) is set based on the symbol used for the njvalue parameter. 

In each case, the n_type field is assumed to contain a 4.3BSD-like value for the N_TYPE bits (defined 
inmach-o/stab.h). For .stabs and .stabn, the n_sect field of the Mach-O file's n 1 1st is set to the 
section number of the symbol for the specified njvalue parameter. For .stabd, the n_s e c t field is set 
to the current section number for the location counter. The n 1 i s t structure is defined in 

mach-o/nl i st . h. 

EXAMPLE 

.stabs "hello. c" ,100, 0,0, Ltext 
.stabn 192,0,0, LBB2 
.stabd 68,0,15 
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.desc 



SYNOPSIS 

.desc symbol_name , absol ute_expressi on 

The .desc directive sets the n_d esc field of the specified symbol to absolute expression. 

EXAMPLE 

.desc _environ, 0x10 ; set the REFERENC ED_DYNAM I CA LLY bit 



.set 



SYNOPSIS 

.set symbol_name , absol ute_expressi on 

The .set directive creates the symbol symbol_name and sets its value to absolute expression. This is the 
same as using symbol _name=absolute expression. 

EXAMPLE 

. set one , 1 
two = 2 



.lsym 



SYNOPSIS 

.lsym symbol_name , expression 

A unique and otherwise unreferenceable symbol of the symbol _name, expression pair is created in the 
symbol table. The symbol created is a static symbol with a type of absolute (N_ABS). Some Fortran 77 
compilers use this mechanism to communicate with the debugger. 



Directives for Dead-Code Stripping 



Dead-code stripping is the process by which the static link editor removes unused code and data 
blocks from executable files. This process helps reduce the overall size of executables, which in turn 
improves performance by reducing the memory footprint of the executable. It also allows programs 
to link successfully in the situation where unused code refers to an undefined symbol, something 
that would normally result in a link error. For more information on dead-code stripping, see "Linking" 
in Xcode User Guide. 



The following sections describe the dead-code stripping directives. 
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.subsections_via_symbols 



SYNOPSIS 

. subsecti ons_vi a_symbol s 

The .subsecti ons_vi a_symbol s directive tells the static link editor that the sections of the object 
file can be divided into individual blocks. These blocks are then stripped if they are not used by other 
code. This directive applies to all section declarations in the assembly file and should be placed outside 
any section declarations, as shown here: 

.subsecti ons_vi a_symbol s 

; Section declarations... 

When using this directive, ensure that each symbol in the section is at the beginning of a block of 
code. Implicit dependencies between blocks of code may result in the removal of needed code from 
the executable. For example, the following section contains three symbols, but execution of the code 
at _p 1 u s_t h r e e ends at the b 1 r statement at the bottom of the code block: 

. text 
.glob! _plus_three 
_pl us_three: 
add i r 3 , r 3 , 1 
.glob! _plus_two 
_pl us_two : 
add i r 3 , r 3 , 1 
.glob! _plus_one 
_pl us_one : 
add i r 3 , r 3 , 1 
blr 

If you use the .subsecti ons_vi a_symbol s directive on this code and_pl us_two and_pl us_three 
are not called by any other code, the static link editor would not add _pl us_two and _pl us_one to 
the executable. In that case, _pl us_th ree would not return the correct value because part of its 

implementation would be missing. In addition, if pi us_oneis dead-stripped, the program may crash 

when _p 1 u s_t h r e e is executed, as it would continue executing into the following block. 



.no_dead_strip 



SYNOPSIS 

. no_dead_stri p symbol_name 

The . no_dead_stri p directive tells the assembler that the symbol specified by symbol _name must 
not be dead-stripped. For example, the following code prevents _my_v ersion_string from being 
dead-stripped: 

. no_dead_stri p _my_versi on_stri ng 

. c s t r i n g 

_my_versi on_stri ng : 

. a s c i i "Version 1.1" 
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Miscellaneous Directives 



This section describes additional directives that don't fit into any of the previous sections. 

.abort 

SYNOPSIS 

.abort [ "abort_stri ng" ] 

The .abort directive causes the assembler to ignore further input and quit processing. No files are 
created. The directive could be used, for example, in a pipe-interconnected version of a compiler — the 
first major syntax error would cause the compiler to issue this directive, saving unnecessary work in 
assembling code that would have to be discarded anyway. 

The optional abort _string is printed as part of the error message when the .abort directive is 
encountered. 

EXAMPLE 

#ifndef VAR 

.abort "You must define VAR to assemble this file." 
#endi f 



.abs 



SYNOPSIS 

.abs symbol_name , expression 

This directive sets the value of symbol _name to 1 if expression is an absolute expression; otherwise, it 
sets the value to zero. 

EXAMPLE 

.macro var 

.abs is_abs,$0 

.if is_abs==l 

.abort "must be absolute" 

. e n d i f 

. endmacro 



.dump and .load 



SYNOPSIS 

.dump filename 
.load filename 
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These directives let you dump and load the absolute symbols and macro definitions for faster loading 
and faster assembly. 

These work like this: 

.include "big_file_l" 
.include "big_file_2" 
.include "big_file_3" 

.include "big_file_N" 
.dump "symbol s . dump" 

The .dump directive writes out all the N_ABS symbols and macros. You can later use the .load 
directive to load all the N_ABS symbols and macros faster than you could with .include: 

.load "symbol s .dump" 

One useful side effect of loading symbols this way is that they aren't written out to the object file. 



.file and .line 



SYNOPSIS 

.file filename 
.line line_number 

The .file directive causes the assembler to report error messages as if it were processing the file 
file_name. 

The .line directive causes the assembler to report error messages as if it were processing the line 
line_number. The next line after the .line directive is assumed to be line_number. 

The assembler turns C preprocessor comments of the form: 

# line_number file_name level 

into: 

.line line_number; .file file_name 

EXAMPLE 

.line 6 

nop | this is line 6 



.if, .elseif, .else, and .endif 



SYNOPSIS 

.if expression 
.elseif expression 
.else 
.endif 
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These directives are used to delimit blocks of code that are to be assembled conditionally, depending 
on the value of an expression. A block of conditional code may be nested within another block of 
conditional code, expression must be an absolute expression. 

For each . i f directive: 

■ there must be a matching . e n d i f 

■ there may be as many intervening .el s el f 's as desired 

■ there may be no more than one intervening .else before the tailing . e n d i f 

Labels or multiple statements must not be placed on the same line as any of these directives; otherwise, 
statements including these directives are not recognized and produce errors or incorrect conditional 
assembly. 



EXAMPLE 




.if a=l 




. 1 ong 1 




. e 1 s e i f a= 


=2 


.long 2 




.else 




. 1 ong 3 




. endif 





.include 



SYNOPSIS 

.include "filename" 

The .include directive causes the named file to be included at the current point in the assembly. The 
- 1 d i r option to the assembler specifies alternative paths to be used in searching for the file if it isn't 
found in the current directory. 

EXAMPLE 

.include "macros. h" 



.machine 



SYNOPSIS 

.machine arch_type 

The .machine directive specifies the target architecture of the assembly file. arch_type can be any 
architecture type you can specify in the arch option of the assembler driver. See "Assembler 
Options" (page 11) for more information. 
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.macro, .endmacro, .macros_on, and .macros_off 

SYNOPSIS 

.macro 
. endmacro 
.macros_on 
.macros_off 

These directives allow you to define simple macros (once a macro is defined, however, you can't 
redefine it). For example: 

.macro var 

i nstructi on_l $0,$1 

i nstructi on_2 $2 

i nstructi on_N 
. 1 ong $n 
. endmacro 

$ d (where d is a single decimal digit, through 9) represents each argument — there can be at most 
10 arguments. $ n is replaced by the actual number of arguments the macro is invoked with. 

When you use a macro, arguments are separated by a comma (except inside matching parentheses — for 
example, xxx ( 1 ,3,4) , yyy contains only two arguments). You could use the macro defined above as 
follows: 

var #0,@sp,4 

This would be expanded to: 

i nstructi on_l #0,@sp 
i nstructi on_2 4 

i nstructi on_N 
. 1 ong 3 

The directives .macros_on and .macros_off allow macros to be written that override an instruction 
or directive while still using the instruction or directive. For example: 

.macro .1 ong 
.macros_off 
.long $0,$0 
.macros_on 
. endmacro 

If you don't specify an argument, the macro substitutes nothing (see ".abs" (page 53)). 

PowerPC-Specific Directives 

The following directives are specific to the PowerPC architecture. 
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ilag_reg 



SYNOPSIS 

.flag_reg reg_number 

This causes the uses of the reg_number general register to get flagged as warnings. This is intended 
for use in macros. 



•greg 



SYNOPSIS 

.greg symbol_name , expression... 

This directive sets symbo 7 _name to 1 when express i on is a general register or zero otherwise. It is 
intended for use in macros. 



.no_ppc601 



SYNOPSIS 

This causes PowerPC 601 instructions to be flagged as errors. This is the same as if the no_ppc601 
option is specified. 



.noflag_reg 



SYNOPSIS 

.noflag_reg reg_number 

This turns off the flagging of the uses of the reg_ number general register so they don't get flagged as 
warnings. This is intended for use in macros. 



Additional Processor-Specific Directives 



The following processor-specific directives are synonyms for other standard directives described 
earlier in this chapter; although they are listed here for completeness, their use isn't recommended. 
Wherever possible, you should use the standard directive instead. 



The following are i386-specific directives: 



i386 Directive 



.ffloat 



Standard Directive 



.single 
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i386 Directive 


Standard Directive 


.dfloat 


.doubl e 


.tfloat 


[expression] " 80-bit IEEE extended precision floating-point 


.word 


. short 


.value 


. short 


. i dent 


(ignored) 


.def 


(ignored) 


. optim 


(ignored) 


.version 


(ignored) 


.In 


(ignored) 
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CHAPTER 



PowerPC Addressing Modes and 
Assembler Instructions 



This chapter contains information specific to the PowerPC processor architecture. 



PowerPC Registers and Addressing Modes 



This section describes the conventions used to specify addressing modes and instruction mnemonics 
for the PowerPC series processor architecture. The instructions themselves are detailed in the next 
section, "PowerPC Assembler Instructions" (page 67). 



Registers 



Many instructions accept register names as operands. The available register names are listed in this 
section. These are the user registers: 



Register 


Description 


r0-r31 


General Purpose Registers 


f0-f31 


Floating-Point Registers 


xer 


Fixed-Point Exception Register 


fpscr 


Floating-Point Status and Control Register 


cr 


Condition Register 


lr 


Link Register 


ctr 


Count Register 


v0-v31 


Vector Registers (AltiVec specific) 



For instructions that take either or a general purpose register as an operand, rO may not be used as 
either a zero or a register operand; the literal value must be used instead. 

These are the special registers 
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Registers 



sr0-srl5 



Description 

Segment Registers 



Operands and Addressing Modes 



The PowerPC processor architecture has only one addressing mode for load and store instructions: 
register plus displacement. The general form for address operands is: 

displacement(register) 

If there is no displacement, the parentheses around the register name must still be used. For example, 
the first two of the following statements are legal, but the last isn't: 



lwz rl2,4(ri: 

Iwz rl2,(rl) 
lwz r 1 2 , rl 



same as displacement of 
INCORRECT 



To specify an arbitrary 32-bit address, two instructions must be used, since all instructions are 32 bits 
long and can't contain both an opcode and a full address. A pair of instructions used to load or store 
data at an address falls into one of a small set of idioms, using the assembler operators lol6(),hil6(), 
and h a 1 6 ( ) to isolate the required portion of the 32-bit address expression. The idioms themselves 
are discussed below 

■ 1 o 1 ^(expression) evaluates to the low (least significant) 16 bits of expression, with a relocation type 
of PPC_RELOC_L016, PPC_RELOC_L014, PPC_RELOC_L016_SECTDIFF, or 
PPC_RELOC_L014_SECTDIFF depending on the instruction and the expression it is used with. 

■ h i 1 ^(expression) evaluates to the high (most significant) 16 bits of expression shifted right 16 bits, 
with a relocation type of PPC_RELOC_HI16 or PPC_RELOC_HI16_SECTDIFF depending on the 
expression it is used with. 

■ h a 1 6 ( expression ) evaluates to the high (most significant) 16 bits of expression shifted right 16 bits, 
increased by one if bit 15 of expression is set (that is, if the value given by 1 o 1 6 ( expression ) is 
negative). This allows the address to be properly reconstituted when the low 16 bit quantity of 
expression is sign-extended by some operators. It has a relocation type of PPC_RELOC_HA16 or 
PPC_RELOC_HA16_SECTDIFF depending on the expression it is used with. 

In specifying a 32-bit address, the desired result is that the 32-bit quantity be in a register. To do this, 
the high and low 16 bits of the address are entered separately with instructions suited to this task. 
Generally, the high 16 bits can be entered into a register with the a d d i s (Add Immediate Shifted) 
instruction and the hi 16() operator. For example, this instruction: 

addis r2 , , hi 16(expr) 

adds the high 16 bits of expr to 0, and enters the result into the high 16 bits of register 2. The instruction 
that immediately follows can then combine the low 16 bits with the high 16 bits in the register and 
perform whatever other operation it does (if any). 

For example, to load the address of the global variable spot into general register 2, the instructions 
below would be used. The o r i instruction doesn't sign-extend the displacement, so the high 16 bits 
of the address needn't be adjusted, and the hi 1 6 ( ) assembler operator is used. 
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addis r2 , , hi 16( spot ) ; ori doesn't sign-extend 

ori r2 , r2 , 1 ol6(spot ) 

In loading the da ta stored at s p o t the 1 w z operator is used, which does sign-extend the displacement, 
the adjusted high 16 bits must be given, with the h a 1 6 ( ) assembler operator: 

addis r2 , , ha 16 ( spot ) ; Iwz sign-extends 

Iwz r3,lol6(spot)(r2) 

1 wz treats the sign-extended low 16 bits as a displacement, adding it to the contents of register 2 to 
get a 32-bit address, and then loads the word at that address into register 3. 



Extended Instruction Mnemonics & Operands 



Branch Mnemonics 

The PowerPC processor family supports a rich variety of extended mnemonics for its three conditional 
branch operators: be, b c 1 r, and b c c t r . Normally, the condition and the nature of the branch are 
specified by numeric operands, but with the extended mnemonics, these numeric operands are 
determined by the assembler from the mnemonic used. 

Conditional branches can alter the contents of the Count Register (c t r), and can take effect based on 
the resulting value in the Count Register, and on whether a specified condition is true or false. The 
first table below summarizes the extended mnemonics for branches that affect the Count Register, 
while the second summarizes additional mnemonics for branches on true and false conditions that 
don't affect the Count Register. The effect of the branch is given on the left. The first four columns of 
each table are for branches where the Link Register bit in the instruction is clear (not set); the remaining 
columns are for branches where the Link Register bit in the instruction is set. Each set of four columns 
gives mnemonics for relative and absolute branches, and for branches to the Link Register or the 
Count Register. 



Branch Type 


LRnot 
set 








LRset 










be 


bca 


bclr 


bectr 


bcl 


bcla 


bclrl 


bcctrl 




Rel. 


Abs. 


toLR 


to 
CTR 


Rel. 


Abs. 


toLR 


to 
CTR 


unconditional 


b 


ba 


blr 


bctr 


bl 


bla 


blrl 


bctrl 


if condition true 


bt 


bta 


btlr 


btctr 


btl 


btla 


btlrl 


btctrl 


if condition false 


bf 


bfa 


bflr 


bfctr 


bfl 


bfla 


bflrl 


bfctrl 


decrement CTR, branch if 
CTR non-zero 


bdnz 


bdnza 


bdnzlr 


- 


bdnzl 


bdnzla 


bdnzlrl 


- 


Decrement CTR, branch if 
CTR non-zero and 
condition true 


bdnzt 


bdnzta 


bdnztlr 




bdnztl 


bdnztla 


bdnztlrl 
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Branch Type 


LRnot 
set 








LRset 










be 


bca 


bclr 


bectr 


bcl 


bcla 


bclrl 


bcctrl 




Rel. 


Abs. 


toLR 


to 
CTR 


Rel. 


Abs. 


toLR 


to 
CTR 


Decrement CTR, branch if 
CTR non-zero and 
condition false 


bdnzf 


bdnzfa 


bdnzflr 




bdnzfl 


bdnzfla 


bdnzflrl 




Decrement CTR, branch if 
CTR zero 


bdz 


bdza 


bdzlr 


- 


bdzl 


bdzla 


bdzlrl 


- 


Decrement CTR, branch if 
CTR zero and condition 
true 


bdzt 


bdzta 


bdztlr 




bdztl 


bdztla 


bdztlrl 




Decrement CTR, branch if 
CTR zero and condition 
false 


bdzf 


bdzfa 


bdzflr 




bdzfl 


bdzfla 


bdzflrl 





The mnemonics in the table above encode specific values for the BO field of the non-extended operators. 
The BO field controls the effect on the Count Register and on what type of condition the branch is to 
be taken. The BI field, which controls the specific condition to consider, must still be given, as the 
first operand. The value of this operand indicates which field of the Condition Register to use, and 
which bit within that field to consider. 

The Condition Register has 8 fields, numbered to 7, each of which contains a bit for conditions less 
than, greater than, equal, and summary overflow or unordered. The numeric value for field n of the Condition 
Register is 4*n, and the numeric values for the conditions are 0, 1, 2, and 3, respectively. The following 
symbols may be used instead of numbers: 



Symbol 


Value 


Meaning 


It 





Less than 


gt 


1 


Greater than 


eq 


2 


Equal 


so 


3 


Summary overflow 


un 


3 


Unordered (after floating-point comparison) 


crO 





Condition Register field 


crl 


4 


Condition Register field 1 


cr2 


8 


Condition Register field 2 


cr3 


12 


Condition Register field 3 


cr4 


16 


Condition Register field 4 
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Symbol 


Value 


Meaning 


cr5 


20 


Condition Register field 5 


cr6 


24 


Condition Register field 6 


cr7 


28 


Condition Register field 7 



For example, a branch if condition true for the condition greater than in Condition Register field 3 could 
be written in any of these ways: 



bt cr3+gt , target 

bt 12+1, target 

bt 13, target 



Omitting the symbol for either the Condition Register field or the condition is permitted, as long as 
the result of the expression is a number from 0-31: 



bt gt, target 
bt cr3, target 

bt 13, target 



uses field 

branches on less than in field 3 

branches on less than in field 3 



Another way to specify these conditions is to use the extended mnemonics in the second table, below. 
These mnemonics encode the actual condition on which to take a branch. The second and third letters 
of the mnemonic indicate that condition: 



Code 


Meaning 


It 


Less than 


le 


Less than or equal 


eq 


Equal 


S e 


Greater than or equal 


gt 


Greater than 


nl 


Not less than 


ne 


Not equal 


n S 


Not greater than 


so 


Summary overflow 


ns 


Not summary overflow 


uo 


Unordered (after floating-point comparison) 


nu 


Not unordered (after floating-point comparison) 



Some condition codes, such as 1 e, are actually more compact codes for a false result on the opposite 
condition in the set of conditions given previously (for example, 1 e is equivalent to if condition false 
on condition greater than). 
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By default, the extended mnemonics in the table below used Condition Register field 0. An optional 
first operand can be given to specify another field, in either numeric form or as a symbol of the form 
era. For example: 

bgt target ; branch if crO shows "greater than" 

bgt cr3, target ; branch if cr3 shows "greater than" 



Branch Type 


LR not set 








LRset 










be 


bca 


bclr 


bectr 


bcl 


bcla 


bclrl 


bcctrl 




Rel. 


Abs. 


toLR 


toCTR 


Rel. 


Abs. 


toLR 


toCTR 


less than 


bit 


blta 


bltlr 


bltctr 


bltl 


bltla 


bltlrl 


bltctrl 


less than or equal 


ble 


blea 


blelr 


blectr 


blel 


blela 


blelrl 


blectrl 


equal 


beq 


beqa 


beqlr 


beqetr 


beql 


beqla 


beqlrl 


beqctrl 


greater than or equal 


bge 


bgea 


bgelr 


bgectr 


bgel 


bgela 


bgerl 


bgectrl 


greater than 


bgt 


bgta 


bgtlr 


bgtctr 


bgttl 


bgla 


bgtlrl 


bgtctrl 


not less than 


bnl 


bnla 


bnllr 


bnlctr 


bnll 


bnlla 


bnllrl 


bnlctrl 


not equal 


bne 


bnea 


bnelr 


bnectr 


bnel 


bnela 


bnelrl 


bnectrl 


not greater than 


bng 


bnga 


bnglr 


bngctr 


bngl 


bngla 


bnglrl 


bngctrl 


summary overflow 


bso 


bsoa 


bsolr 


bsoctr 


bsol 


bsola 


bsolrl 


bsoctrl 


not summary overflow 


bns 


bnsa 


bnslr 


bnsctr 


bnsl 


bnsla 


bnslrl 


bnsctrl 


unordered 


bun 


buna 


bunlr 


bunctr 


bunl 


bunla 


bunlrl 


bunctrl 


not unordered 


bnu 


bnua 


bnulr 


bnuctr 


bnul 


bnula 


bnulrl 


bnuctrl 



Branch Prediction 



PowerPC processors attempt to determine whether a conditional branch is likely to be taken or not. 
By default, they assume the following about conditional branches: 

■ A conditional branch with a negative displacement (that is, a branch to a lower address) is predicted 
to be taken. This type of branch may, for example, lead to the beginning of a loop that's repeated 
many times. 

■ A conditional branch with a non-negative displacement is predicted not to be taken (that is, it 
falls through). 

■ A conditional branch to an address in the Link or Count Registers is predicted not to be taken 
(that is, it falls through). 
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If the assembly language programmer knows the likely outcome of a conditional branch, a suffix can 
be added to the mnemonic that indicates which way the branch should be predicted to go: a ' + ' 
instructs the processor to predict that the branch will be taken, while a ' - ' instructs it to predict that 
the branch will not be taken. The branch prediction in for the 64-bit PowerPC AS architecture uses a 
different encoding for static branch prediction than the classic PowerPC architecture. This is encoded 
in the AT bits instead of the Y-bit of the conditional branch. The assembler takes ' ++ ' and 
suffixes to encode branch prediction using the AT bits. The ' + ' and ' - ' suffixes encode the branch 
prediction using the Y-bit by default. The flag -static_branch_predictio n_AT_b i t s changes this 
so that the ' + ' and ' - ' suffixes encode the AT bits. Where an operator allows a prediction suffix, a 
' ± ' symbol appears after it in the table in "PowerPC Assembler Instructions" (page 67). 

Use the j b s r pseudo instruction when you may not be able to reach the target of a branch and link 
instruction with a b 1 instruction. The j b s r instruction uses a sequence of code called a long branch 
stub which will always be able to reach the target. 



long branch stub 



jbsr _foo,Ll 

LI: lis rl2,hil6(_foo) 

ori rl2,rl2,lol6(_foo) 

mtctn rl2 

bctn 

The jbsr pseudo instruction assembles to a bl instruction targeted at LI. It also generates a 
PPC_RELOC JBSR relocation entry for the symbol _foo. Then when the linker creates a non-relocatable 
output file it will change the target of the bl instruction to _foo if the bl instruction's displacement 
will reach. Else it will leave the bl instruction targeted at LI. 



Trap Mnemonics 



Like the branch-on-condition mnemonics above, the trap operator also has extended mnemonics 
which encode the numeric TO field as follows: 



Code 


Meaning 


TO encoding 


It 


Less than 


16 


le 


Less than or equal 


20 


eq 


Equal 


4 


g e 


Greater than or equal 


12 


gt 


Greater than 


8 


nl 


Not less than 


12 


ne 


Not equal 


24 


n g 


Not greater than 


20 


lit 


Logically less than 


2 
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Code 


Meaning 


TO encoding 


lie 


Logically less than or equal 


6 


lge 


Logically greater than or equal 


5 


Igt 


Logically greater than 


1 


lnl 


Logically not less than 


5 


lng 


Logically not greater than 


6 


(none) 


Unconditional 


31 



The condition is indicated from the third letter of the extended mnemonics in the table below: 



Trap Type 


64-bit comparison 


32-bit-comparison 




tdi 


td 


twi 


tw 




Immediate 


Register 


Immediate 


Register 


unconditional 


- 


- 


- 


trap 


if less than 


tdlti 


tdlt 


twlti 


twit 


if less than or equal 


tdlei 


tdle 


twlei 


twle 


if equal 


tdeqi 


tdeq 


tweqi 


tweq 


if greater than or equal 


tdgei 


tdge 


twgei 


twge 


if greater than 


tdgti 


tdgt 


twgti 


twgt 


if not less than 


tdnli 


tdnl 


twnli 


twnl 


if not equal 


tdnei 


tdne 


twnei 


twne 


if not greater than 


tdngi 


tdng 


twngi 


twng 


if logically less than 


tdllti 


tdllt 


twllti 


twllt 


if logically less than or equal 


tdllei 


tdlle 


twllei 


twlle 


if logically greater than or equal 


tdlgei 


tdlge 


twlgei 


twlge 


if logically greater than 


tdlgti 


tdlgt 


twlgti 


twlgt 


if logically not less than 


tdlnli 


tdlnl 


twlnli 


twlnl 


if logically not greater than 


tdlngi 


tdlng 


twlngi 


twlng 
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PowerPC Assembler Instructions 



Note the following points about the information contained in this section: 

■ Operation Name is the name that appears in the PowerPC manuals, or the effect of the operator 
for an extended mnemonic. 

■ The form of operands is that used in PowerPC Microprocessor Family: The Programming Environments. 
m The order of operands is desti nati on <- source. 



A 



Operator 


Operands 


Operation Name 


abs 


RT,RA 


Absolute (601 specific) 


abs. 


RT,RA 




abso 


RT,RA 




abso. 


RT,RA 











add 


RT,RA,RB 


Add 


add. 


RT,RA,RB 




addo 


RT,RA,RB 




addo. 


RT,RA,RB 











addc 


RT,RA,RB 


Add Carrying 


addc. 


RT,RA,RB 




addco 


RT,RA,RB 




addco. 


RT,RA,RB 











adde 


RT,RA,RB 


Add Extended 


adde. 


RT,RA,RB 




addeo 


RT,RA,RB 




addeo. 


RT,RA,RB 
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addi 



RT,RA,SI Add Immediate 



addic 


RT,RA,SI 


Add Immediate Carrying 









addic. 


RT,RA,SI 


Add Immediate Carrying and Record 









addis RT,RA,UI Add Immediate Shifted 



addme 


RT,RA 


Add To Minus One Extended 


addme. 


RT,RA 




addmeo 


RT,RA 




addmeo. 


RT,RA 











addze 


RT,RA 


Add To Zero Extended 


addze. 


RT,RA 




addzeo 


RT,RA 




addzeo. 


RT,RA 











and RA,RT,RB 



AND 



and. RA,RT,RB 



andc 


RA,RT,RB 


AND with Complement 


andc. 


RA,RT,RB 











andi. 


RA,RT,UI 


AND Immediate 









andis. RA,RT,UI 



AND Immediate Shifted 
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attn 


UI 


Support Processor Attention 



B 



Operator 


Operands 


Operation Name 


b 


target_addr 


Branch 


ba 


target_addr 




bl 


target_addr 




bla 


target_addr 











bc+ 


BO,BD,target_addr 


Branch Conditional 


bca± 


BO,BD,target_addr 




bcl+ 


BO,BD,target_addr 




bcla+ 


BO,BD,target_addr 











bclr+ 


BO,BD 


Branch Conditional to Link Register 


bclr 


BO,BD, BH 




bclr+ 


BO,BD, BH 




bclrl+ 


BO,BD 




bclrl+ 


BO,BD,BH 











bcctr+ 


BO,BD 


Branch Conditional to Count Register 


bcctr+ 


BO,BD, BH 




bcctrl+ 


BO,BD 




bcctrli 


BO,BD,BH 











bctr 




Branch unconditionally to CTR 


bctrl 






bctrl 


BH 
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bctr± BO,BD 
bctrl± BO,BD 



Equiv. to bcctri B0,BD 
Equiv. to bcctri + BO.BD 



bdnz± 


target_addr 


Decrement CTR, branch if CTR non-zero 


bdnza± 


target_addr 




bdnzl± 


target_addr 




bdnzla± 


target_addr 




bdnzlr+ 




...toLR 


bdnzlr+ 


BH 




bdnzlrl± 






bdnzlrl± 


BH 











bdnzf± 


CRF+COND,target_addr 


Decrement CTR, branch if CTR non-zero and condition false 


bdnzfa+ 


CRF+COND,target_addr 




bdnzfli 


CRF+COND,target_addr 




bdnzfla+ 


CRF+COND,target_addr 




bdnzflr+ 


CRF+COND 


...toLR 


bdnzflr+ 


CRF+COND, BH 




bdnzflrli 


CRF+COND 




bdnzflrl+ 


CRF+COND, BH 











bdnzt± 


CRF+COND,target_addr 


Decrement CTR, branch if CTR non-zero and condition true 


bdnzta± 


CRF+COND,target_addr 




bdnztli 


CRF+COND,target_addr 




bdnztla± 


CRF+COND,target_addr 




bdnztlr± 


CRF+COND 


...toLR 


bdnztlr± 


CRF+COND,BH 




bdnztlrl± 


CRF+COND 
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bdnztlrl± 


CRF+COND,BH 











bdz± 


target_addr 


Decrement CTR, branch if CTR zero 


bdza± 


target_addr 




bdzl± 


target_addr 




bdzla± 


target_addr 











bdzf± 


CRF+COND,target_addr 


Decrement CTR, branch if CTR zero and condition false 


bdzfa± 


CRF+COND,target_addr 




bdzfl± 


CRF+COND,target_addr 




bdzfla± 


CRF+COND,target_addr 




bdzflr+ 


CRF+COND 


...toLR 


bdzflr± 


CRF+COND,BH 





bdzflrl+ 


CRF+COND 




bdzflrli 


CRF+COND,BH 




bdzlr+ 






bdzlr+ 


BH 




bdzlrl+ 






bdzlrl+ 


BH 











bdzt+ 


CRF+COND,target_addr 


Decrement CTR, branch if CTR zero and condition false 


bdzta+ 


CRF+COND,target_addr 




bdztl+ 


CRF+COND,target_addr 




bdztla± 


CRF+COND,target_addr 




bdztlri 


CRF+COND 


...to LR 


bdztlr+ 


CRF+COND,BH 




bdztlrli 


CRF+COND 
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bdztlrl+ CRF+COND,BH 



beq+ 


CRF,target_addr 


Branch if equal 


beq± 


target_addr 




beqa+ 


CRF,target_addr 




beqa+ 


target_addr 




beql+ 


CRF,target_addr 




beql+ 


target_addr 




beqla+ 


CRF,target_addr 




beqla+ 


target_addr 




beqctri 


CRF 


...to CTR 


beqctri 


CRF,BH 




beqctri 






beqctrli 


CRF 




beqctrli 


CRF,BH 




beqctrl+ 






beqlr+ 


CRF 


...to LR 


beqlr+ 


CRF,BH 




beqlr+ 






beqlrl+ 


CRF 




beqlrl+ 


CRF,BH 




beqlrl+ 













bf± 


CRF+COND,target_addr 


Branch if condition false 


bfa± 


CRF+COND,target_addr 




bfl+ 


CRF+COND,target_addr 




bfla± 


CRF+COND,target_addr 




bfctr+ 


CRF+COND 


...to CTR 



72 PowerPC Assembler Instructions 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



CHAPTER 5 

PowerPC Addressing Modes and Assembler Instructions 



bfctr± 


CRF+COND,BH 




bfctrl± 


CRF+COND 




bfctrl± 


CRF+COND,BH 




bflr± 


CRF+COND 


...to LR 


bflr± 


CRF+COND,BH 




bflrli 


CRF+COND 




bflrli 


CRF+COND,BH 












bge± 


CRF,target_addr 


Branch if greater than or equal 


bge± 


target_addr 




bgea± 


CRF,target_addr 




bgea± 


target_addr 




bgel± 


CRF,target_addr 




bgel± 


target_addr 




bgela± 


CRF,target_addr 




bgela± 


target_addr 




bgectr± 


CRF 


...toCTR 


bgectr± 


CRF,BH 




bgectr± 






bgectrl+ 


CRF 




bgectrl+ 


CRF,BH 




bgectrl+ 






bgelr+ 


CRF 


...toLR 


bgelr+ 


CRF,BH 




bgelr+ 






bgelrl+ 


CRF 




bgelrl+ 


CRF,BH 




bgelrl+ 
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bgt± 


CRF,target_addr 


Branch if greater than 




bgt± 


target_addr 






bgta± 


CRF,target_addr 






bgta+ 


target_addr 






bgtl± 


CRF,target_addr 






bgtl± 


target_addr 






bgtla+ 


CRF,target_addr 






bgtla+ 


target_addr 






bgtctr+ 


CRF 


...to CTR 




bgtctr± 


CRF,BH 






bgtctr+ 








bgtctrl+ 


CRF 






bgtctrl+ 


CRF,BH 






bgtctrl+ 








bgtlr+ 


CRF 


...to LR 




bgtlri 


CRF,BH 






bgtlr+ 








bgtlrl+ 


CRF 






bgtlrl+ 


CRF,BH 






bgtlrl+ 






















ble± 


CRF,target_addr 


Branch if less than or equal 


ble± 


target_addr 




blea+ 


CRF,target_addr 




blea+ 


target_addr 




blel± 


CRF,target_addr 




blel± 


target_addr 




blela++ 


CRF,target_addr 
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blelai 


target_addr 




blectri 


CRF 


...toCTR 


blectri 


CRF,BH 




blectri 






blectrli 


CRF 




blectrli 


CRF,BH 




blectrli 






blelri 


CRF 


...toLR 


blelri 


CRF,BH 




blelri 






blelrli 


CRF 




blelrli 


CRF,BH 




blelrli 













blr 




Branch unconditionally to LR 


blr 


BH 




blrl 






blrl 


BH 











blti 


CRF,target_addr 


Branch if less than 


blti 


target_addr 




bltai 


CRF,target_addr 




bltai 


target_addr 




bltli 


CRF,target_addr 




bltli 


target_addr 




bltlai 


CRF,target_addr 




bltlai 


target_addr 




bltctri 


CRF 


...to CTR 
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bltctr+ 


CRF,BH 




bltctr+ 






bltctrl+ 


CRF 




bltctrl+ 


CRF,BH 




bltctrl+ 






bltlr± 


CRF 


...to LR 


bltlrdz 


CRF,BH 




bltlr± 






bltlrli 


CRF 




bltlrli 


CRF,BH 




bltlrli 













bne± 


CRF,target_addr 


Branch if not equal 


bne+ 


target_addr 




bnea+ 


CRF,target_addr 




bnea± 


target_addr 




bnel+ 


CRF,target_addr 




bnel+ 


target_addr 




bnela+ 


CRF,target_addr 




bnela+ 


target_addr 




bnectri 


CRF 


...to CTR 


bnectr± 


CRF,BH 




bnectrd= 






bnectrl+ 


CRF 




bnectrl+ 


CRF,BH 




bnectrl+ 






bnelr+ 


CRF 


...to LR 


bnelr+ 


CRF,BH 
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bnelr± 








bnelrl± 


CRF 






bnelrl± 


CRF,BH 






bnelrl± 
























bng± 


CRF,target_addr 


Branch if not greater than 


bng± 


target_addr 




bnga± 


CRF,target_addr 




bnga± 


target_addr 




bngl± 


CRF,target_addr 




bngl± 


target_addr 




bngla± 


CRF,target_addr 




bngla± 


target_addr 




bngctri 


CRF 


...toCTR 


bngctri 


CRF,BH 




bngctri 






bngctrli 


CRF 




bngctrli 


CRF,BH 




bngctrl+ 






bnglr+ 


CRF 


...toLR 


bnglr+ 


CRF,BH 




bnglr+ 






bnglrli 


CRF 




bnglrli 


CRF,BH 




bnglrl+ 




















bnl± 


CRF,target_addr 


Branch if not less than 




bnl+ 


target_addr 
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bnla+ 


CRF,target_addr 




bnla+ 


target_addr 




bnll+ 


CRF,target_addr 




bnll± 


target_addr 




bnlla+ 


CRF,target_addr 




bnlla+ 


target_addr 




bnlctr± 


CRF 


...toCTR 


bnlctr± 


CRF,BH 




bnlctr+ 






bnlctrl+ 


CRF 




bnlctrl+ 


CRF,BH 




bnlctrl+ 






bnllr+ 


CRF 


...toLR 


bnllr+ 


CRF,BH 




bnllr+ 






bnllrl+ 


CRF 




bnllrl+ 


CRF,BH 




bnllrl+ 













bns+ 


CRF,target_addr 


Branch if not summary overflow 


bns+ 


target_addr 




bnsa+ 


CRF,target_addr 




bnsa+ 


target_addr 




bnsl+ 


CRF,target_addr 




bnsl+ 


target_addr 




bnsla+ 


CRF,target_addr 




bnsla+ 


target_addr 




bnsctr+ 


CRF 


...toCTR 
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bnsctr± 


CRF,BH 




bnsctr+ 






bnsctrl+ 


CRF 




bnsctrl+ 


CRF,BH 




bnsctrl+ 






bnslr+ 


CRF 


...toLR 


bnslr+ 


CRF,BH 




bnslr+ 






bnslrl+ 


CRF 




bnslrl+ 


CRF,BH 




bnslrl+ 













bnu± 


CRF,target_addr 


Branch if not unordered 


bnu+ 


target_addr 




bnua+ 


CRF,target_addr 




bnua+ 


target_addr 




bnul+ 


CRF,target_addr 




bnul+ 


target_addr 




bnula± 


CRF,target_addr 




bnula± 


target_addr 




bnuctri 


CRF 


...toCTR 


bnuctri 


CRF,BH 




bnuctri 






bnuctrl+ 


CRF 




bnuctrl+ 


CRF,BH 




bnuctrl+ 






bnulr+ 


CRF 


...toLR 


bnulr+ 


CRF,BH 
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bnulr+ 






bnulrl+ 


CRF 




bnulrl± 


CRF,BH 




bnulrl± 













bso± 


CRF,target_addr 


Branch if summary overflow 


bso± 


target_addr 




bsoa+ 


CRF,target_addr 




bsoa+ 


target_addr 




bsol+ 


CRF,target_addr 




bsol+ 


target_addr 




bsola+ 


CRF,target_addr 




bsola+ 


target_addr 




bsoctr± 


CRF 


...toCTR 


bsoctr+ 


CRF,BH 




bsoctr± 






bsoctrl+ 


CRF 




bsoctrl+ 


CRF,BH 




bsoctrl+ 






bsolr+ 


CRF 


...toLR 


bsolr+ 


CRF,BH 




bsolr+ 






bsolrl+ 


CRF 




bsolrl+ 


CRF,BH 




bsolrl+ 













btd 



CRF+COND,target_addr Branch if condition true 



bta+ CRF+COND,target_addr 
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btl± 


CRF+COND,target_addr 




btla± 


CRF+COND,target_addr 




btctr± 


CRF+COND 


...toCTR 


btctr± 


CRF+COND,BH 




btctrli 


CRF+COND 




btlr± 


CRF+COND 


...toLR 


btlr± 


CRF+COND,BH 




btlrl± 


CRF+COND 




btlrl± 


CRF+COND,BH 











bun± 


CRF,target_addr 


Branch if unordered 


bun± 


target_addr 




buna± 


CRF,target_addr 




buna± 


target_addr 




bunli 


CRF,target_addr 




bunl± 


target_addr 




bunla± 


CRF,target_addr 




bunla± 


target_addr 




bunctri 


CRF 


...toCTR 


bunctri 


CRF,BH 




bunctri 






bunctrl± 


CRF 




bunctrl± 


CRF,BH 




bunctrl± 






bunlr± 


CRF 


...toLR 


bunlr± 


CRF,BH 




bunlr± 






bunlrli 


CRF 
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bunlrl± 


CRF,BH 




bunlrl+ 







c 



Operator 


Operands 


Operation Name 


clcs 


RD,RA 


Cache Line Compute Size (601 specific) 









clrldi ra,rs,n 



Macro: rid id ra,rs,0,n 



clrldi. 
clrlsldi 



clrlsldi. 



clrlslwi 
clrlslwi. 



clrlwi 



clrlwi. 
clrrdi 



clrrdi. 



clrrwi 
clrrwi. 



ra,rs,n Macro: rldicl. ra,rs,0,n 
ra,rs,b,n Macro: rldic ra,rs,n,b-n 



ra,rs,b,n Macro: rldic. ra,rs,n,b-r 



ra,rs,b,n Macro: rlwinm ra , rs , r , b-n , 31-n 
ra,rs,b,n Macro: rlwinm. ra , rs , n , b-n , 31-n 



ra,rs,n Macro: rl wi nm ra,rs,0,n,31 



ra,rs,n Macro: rl wi nm. ra,rs,0,n,31 
ra,rs,n Macro: rldicr ra,rs,0,63-n 



ra,rs,n Macro: rldicr. ra,rs,0,63-n 



ra,rs,n Macro: rlwinm ra , rs , , , 31-n 
ra,rs,n Macro: rl wi nm. ra , rs , , , 31-n 



cmp 


BF,L,RA,RB 


Compare 


cmp 


CRF,L,RA,RB 




cmp 


BF,RA,RB 


Equivto cmp BF,0,RA,RB 


cmp 


CRF,L,RA,RB 


Equiv. to cmp CRF,0,RA,RB 


cmpd 


RA,RB 


Equiv. to cmp 0.1.RA.RB 


cmpd 


BF,RA,RB 


Equiv. to cmp BF,1,RA,RB 


cmpd 


CRF,RA,RB 


Equiv. to cmp BF,1,RA,RB 
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cmpw 


RA,RB 


Equiv. to cmp 0,0,RA,RB 


cmpw 


BF,RA,RB 


Equiv. to cmp BF,0,RA,RB 


cmpw 


CRF,RA,RB 


Equiv. to cmp CRF,0,RA,RB 









cmpi 


BF,L,RA,SI 


Compare Immediate 


cmpi 


CRF,L,RA,SI 




cmpi 


BF,RA,SI 


Equiv. to cmpi BF , , RA , SI 


cmpi 


CRF,RA,SI 


Equiv. to cmpi CRF,0,RA,SI 


cmpdi 


RA,SI 


Equiv. to cmpi , 1 , RA , S I 


cmpdi 


BF,RA,SI 


Equiv. to cmp B F , 1 , RA , S I 



cmpdi 



CRF,RA,SI 



Equiv. to cmpi CRF.l.RA.SI 



cmpwi 


RA,SI 


Equiv. to cmp i , , RA , S I 


cmpwi 


BF,RA,SI 


Equiv. to cmpi BF , , RA, SI 


cmpwi 


CRF,RA,SI 


Equiv. to cmpi CRF,0,RA,SI 









cmpi 


BF,L,RA,RB 


Compare Logical 


cmpi 


CRF,L,RA,RB 




cmpi 


BF,RA,RB 


Equiv. to cmpi BF,0,RA,RB 


cmpi 


CRF,RA,RB 


Equiv. to cmpi CRF,0,RA,RB 


cmpld 


RA,RB 


Equiv. to cmpi 0,1,RA,RB 


cmpld 


BF,RA,RB 


Equiv. to cmpi BF,1,RA,RB 


cmpld 


CRF,RA,RB 


Equiv. to cmpi CRF,1,RA,RB 


cmplw 


RA,RB 


Equiv. to cmpi 0,0,RA,RB 


cmplw 


BF,RA,RB 


Equiv. to cmpi BF,0,RA,RB 


cmplw 


CRF,RA,RB 


Equiv. to cmpi CRF,0,RA,RB 
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cmpli 


BF,L,RA,UI 


Compare Logical Immediate 


cmpli 


CRF,L,RA,UI 




cmpli 


BF,RA,UI 


Equiv. to cmpl i B F , , RA , U I 


cmpli 


CRF,RA,UI 


Equiv. to cmpl i CRF , , RA , UI 


cmpldi 


RA,UI 


Equiv. to cmpi , 1 , RA , U I 


cmpldi 


BF,RA,UI 


Equiv. to cmpi B F , 1 , RA , U I 


cmpldi 


CRF,RA,UI 


Equiv. to cmpi CRF , 1 , RA, UI 


cmplwi 


BF,RA,UI 


Equiv. to cmpi BF , , RA , UI 


cmplwi 


CRF,RA,UI 


Equiv. to cmpi CRF,0,RA,UI 


cmplwi 


RA,UI 


Equiv. to cmpi CRF,0,RA,UI 









cntlzd RA,RT 



Count Leading Zeros Doubleword 



cntlzd. RA,RT 



cntlzw 



RA,RT Count Leading Zeros Word 



cntlzw. 



RA,RT 



crand 


BT,BA,BB 


Condition Register AND 









crandc 



BT,BA,BB Condition Register AND with Complement 



creqv 



BT,BA,BB Condition Register Equivalent 



crmove 


BT,BA 


Condition Register Move (Equiv. to c ro r BT , BA , BA) 









crnand 



BT,BA,BB Condition Register NAND 
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crnor BT,BA,BB 



Condition Register NOR 



crnot 


BT,BA 


Condition Register NOT (Equiv. to crnor BT,BA,BA) 









cror 


BT,BA,BB 


Condition Register OR 









crorc 



BT,BA,BB Condition Register OR with Complement 



crxor 



BT,BA,BB Condition Register XOR 



D 



Operator 


Operands 


Operation Name 


dcba 


RA,RB 


Data Cache Block Allocate 









dcbf RA,RB Data Cache Block Flush 



dcbi 


RA,RB 


Data Cache Block Invalidate 









dcbst RA,RB Data Cache Block Store 



debt 


RA,RB 


Data Cache Block Touch 


debt 


RA,RB,TH 


Data Cache Block Touch X-form 


dcbt!28 


RA,RB,TH 


(same as above) 









dcbtl 


RA,RB 


Data Cache Block Touch Line 


dcbtl 


RA,RB,TH 


Data Cache Block Touch Line X-form 


dcbtll28 


RA,RB,TH 


(same as above) 
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dcbtst 


RA,RB 


Data Cache Block Touch for Store 









dcbz 


RA,RB 


Data Cache Block Set to Zero 









dcbzl 


RA,RB 


Data Cache Block Set to Zero Line 


dcbzll28 


RA,RB 


(same as above) 









div 


RT,RA,RB 


Divide (601 specific) 


div. 


RT,RA,RB 




divo 


RT,RA,RB 




divo. 


RT,RA,RB 











divd 


RT,RA,RB 


Divide Doubleword 


divd. 


RT,RA,RB 




divdo 


RT,RA,RB 




divdo. 


RT,RA,RB 











divdu RT,RA,RB Divide Doubleword Unsigned 
divdu. RT,RA,RB 



divduo RT,RA,RB 



divduo. RT,RA,RB 



divs 


RT,RA,RB 


Divide Short (601 specific) 


divs. 


RT,RA,RB 




divso 


RT,RA,RB 




divso. 


RT,RA,RB 











divw 


RT,RA,RB 


Divide Word 
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divw. 


RT,RA,RB 




divwo 


RT,RA,RB 




divwo. 


RT,RA,RB 











divwu 


RT,RA,RB 


Divide Word Unsigned 


divwu. 


RT,RA,RB 




divwuo 


RT,RA,RB 




divwuo. 


RT,RA,RB 











doz 


RT,RA,RB 


Difference or Zero (601 specific) 


doz. 


RT,RA,RB 




dozo 


RT,RA,RB 




dozo. 


RT,RA,RB 











dozi 


RT,RA,SI 


Difference or Zero Immediate (601 specific) 








dss 


tag 


Data Stream Stop (AltiVec specific) 








dssall 




Data Stream Stop All (AltiVec specific) 








dst 


RA,RB,tag 


Data Stream Touch (AltiVec specific) 








dstst 


RA,RB,tag 


Data Stream Touch for Store (AltiVec specific) 








dststt 


RA,RB,tag 


Data Stream Touch for Store Transient (AltiVec specific) 








dstt 


RA,RB,tag 


Data Stream Touch Transient (AltiVec specific) 



Operator 



eciwx 



Operands Operation Name 

RT,RA,RB External Control In Word Indexed 
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ecowx 


RT,RA,RB 


External Control Out Word Indexed 









eieio Enforce In-order Execution of I/O 



eqv 


RA,RT,RB 


Equivalent 


eqv. 


RA,RT,RB 











extldi ra,rs,n,b 
extldi. ra,rs,n,b 



Macro: rldicr ra ,rs,b,n-l 
Macro: rl di cr . ra,rs,b,n-l 



extlwi ra,rs,n,b 



Macro: rlwi nm ra.rs ,b,0,n-l 



extlwi. ra,rs,n,b 



Macro: rlwi nm. ra , rs ,b ,0 , n-1 



extrdi ra,rs,n,b 



Macro: rldicl ra , rs ,b+n ,64-n 



extrdi. ra,rs,n,b 



Macro: rldicl. ra , rs , b+n , 64-n 



extrwi ra,rs,n,b 



Macro: rlwi nm ra , rs , b+n ,32-n ,31 



extrwi. ra,rs,n,b 



Macro: rlwi nm. ra , rs , b+n ,32-n ,31 



extsb 


RA,RT 


Extend Sign Byte 


extsb. 


RA,RT 











extsh 


RA,RT 


Extend Sign Halfword 


extsh. 


RA,RT 











extsw 


RA,RT 


Extend Sign Word 


extsw. 


RA,RT 
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Operator 


Operands 


Operation Name 


fabs 


FRT, FRB 


Floating Absolute Value 


fabs. 


FRT, FRB 











fadd 


FRT,FRA,FRB 


Floating Add 


fadd. 


FRT,FRA,FRB 




fadds 


FRT,FRA,FRB 




fadds. 


FRT,FRA,FRB 











fcfid 


FRT,FRB 


Floating Convert From Integer Doubleword 


fcfid. 


FRT,FRB 











fcmpo 


BF,FRA,FRB 


Floating Compare Ordered 


fcmpo 


CBF,FRA,FRB 











fcmpu 
fcmpu 



BF,FRA,FRB Floating Compare Unordered 
CBF,FRA,FRB 



fetid 


FRT,FRB 


Floating Convert to Integer Doubleword 


fetid. 


FRT,FRB 











fctidz FRT,FRB Floating Convert to Integer Doubleword with Round toward Zero 



fctidz. FRT,FRB 



fctiw 


FRT,FRB 


Floating Convert to Integer Word 


fctiw. 


FRT,FRB 
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fctiwz 


FRT,FRB 


Floating Convert to Integer Word with Round toward Zero 


fctiwz. 


FRT,FRB 











fdiv 


FRT,FRA,FRB 


Floating Divide 


fdiv. 


FRT,FRA,FRB 




fdivs 


FRT,FRA,FRB 




fdivs. 


FRT,FRA,FRB 











fmadd 


FRT,FRA,FRC,FRB 


Floating Multiply-Add [Single] 


fmadd. 


FRT,FRA,FRC,FRB 




fmadds 


FRT,FRA,FRC,FRB 




fmadds. 


FRT,FRA,FRC,FRB 











fmr 
fmr. 



FRT,FRB 
FRT,FRB 



Floating Move Register 



fmsub 


FRT,FRA,FRC,FRB 


Floating Multiply-Subtract 


fmsub. 


FRT,FRA,FRC,FRB 


[Single] 


fmsub s 


FRT,FRA,FRC,FRB 




fmsub s. 


FRT,FRA,FRC,FRB 











fmul 


FRT,FRA,FRC 


Floating Multiply 


fmul. 


FRT,FRA,FRC 




fmuls 


FRT,FRA,FRC 




fmuls. 


FRT,FRA,FRC 











fnabs 


FRT,FRB 


Floating Negative Absolute Value 


fnabs. 


FRT,FRB 
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fneg 


FRT,FRB 


Floating Negate 


fneg. 


FRXFRB 











fnmadd 


FRT,FRA,FRC,FRB 


Floating Negative Multiply-Add [Single] 


fnmadd. 


FRT,FRA,FRC,FRB 




fnmadds 


FRT,FRA,FRC,FRB 




fnmadds. 


FRT,FRA,FRC,FRB 











fnmsub 


FRT,FRA,FRC,FRB 


Floating Negative Multiply-Subtract [Single] 


fnmsub. 


FRT,FRA,FRC,FRB 




fnmsubs 


FRT,FRA,FRC,FRB 




fnmsubs. 


FRT,FRA,FRC,FRB 











fres 


FRT,FRB 


Floating Reciprocal Estimate Single 


fres. 


FRT,FRB 











frsp 


FRT,FRB 


Floating Round to Single-Precision 


frsp. 


FRT,FRB 











frsqrte 


FRXFRB 


Floating Reciprocal Square Root Estimate 


frsqrte. 


FRT,FRB 











fsel 


FRT,FRA,FRC,FRB 


Floating Select 


fsel. 


FRT,FRA,FRC,FRB 











fsqrt 


FRT,FRB 


Floating Square Root (Double-Precision) 


fsqrt. 


FRT,FRB 
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fsqrts FRT,FRB Floating Square Root Single 



fsqrts. FRT,FRB 



fsub 


FRT,FRA,FRB 


Floating Subtract 


fsub. 


FRT,FRA,FRB 




fsubs 


FRT,FRA,FRB 




fsubs. 


FRT,FRA,FRB 





Operator 


Operands 


Operation Name 


icbi 


RA,RB 


Instruction Cache Block Invalidate 









inslwi 


ra,rs,n,b 


Macro: rl wimi ra , rs ,32-b, b, (b+n)-l 


inslwi. 


ra,rs,n,b 


Macro: rl wimi . ra , rs ,32-b ,b , (b+n )-l 


insrdi 


ra,rs,n,b 


Macro: r 1 d i mi ra , rs ,64-(b+n ) ,b 


insrdi. 


ra,rs,n,b 


Macro: rl di mi . ra , rs , 64-(b+n) , b 


insrwi 


ra,rs,n,b 


Macro: rl wimi ra , rs ,3 2- (b+n ) , b, (b+n )-l 


insrwi. 


ra,rs,n,b 


Macro: rl wimi . ra , rs ,3 2- (b+n ) ,b , (b+n )-l 









isync 




Instruction Synchronize 





Operator 


Operands 


Operation Name 


jbsr 


Lstub, Lbranch_island 


Branch and Link (pseudo-instruction, see "Branch 
Prediction" (page 64) for more) 


jmp 


Lstub, Lbranch_island 


Branch (pseudo-instruction, see "Branch Prediction" (page 64) 
for more) 



92 PowerPC Assembler Instructions 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



CHAPTER 5 

PowerPC Addressing Modes and Assembler Instructions 



L 



Operator 


Operands 


Operation Name 


la 


RT,D(RA) 


Load Address (Equiv to add i RT.RA.D) 









lbz 


RT,D(RA) 


Load Byte and Zero 









lbzu 


RT,D(RA) 


Load Byte and Zero with Update 









lbzux RT,RA,RB Load Byte and Zero with Update Indexed 



lbzx 


RT,RA,RB 


Load Byte and Zero Indexed 









Id 


RT,DS(RA) 


Load Doubleword 









ldarx RT,RA,RB Load Doubleword and Reserve Indexed 



ldu RT,DS(RA) Load Doubleword with Update 



ldux 


RT,RA,RB 


Load Doubleword with Update Indexed 









ldx 


RT,RA,RB 


Load Doubleword Indexed 









ltd 


FRT,D(RA) 


Load Floating-Point Double 









lfdu FRT,D(RA) 



Load Floating-Point Double with Update 
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lfdux 


FRT,RA,RB 


Load Floating-Point Double with Update Indexed 









lfdx 


FRT,RA,RB 


Load Floating-Point Double Indexed 









lfs 


FRT,D(RA) 


Load Floating-Point Single 









lfsu 


FRT,D(RA) 


Load Floating-Point Single with Update 









lfsux 


FRT,RA,RB 


Load Floating-Point Single with Update Indexed 









lfsx 


FRT,RA,RB 


Load Floating-Point Single Indexed 









lha 


RT,D(RA) 


Load Halfword Algebraic 









lhau 



RT,D(RA) Load Halfword Algebraic with Update 



lhaux 


RT,RA,RB 


Load Halfword Algebraic with Update Indexed 









lhax RT,RA,RB Load Halfword Algebraic Indexed 



lhbrx 


RT,RA,RB 


Load Halfword Byte-Reverse Indexed 









lhz 


RT,D(RA) 


Load Halfword and Zero 









lhzu 



RT,D(RA) Load Halfword and Zero with Update 



lhzux 


RT,RA,RB 


Load Halfword and Zero with Update Indexed 
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lhzx RT,RA,RB Load Halfword and Zero Indexed 



li 


Rx,value 


Load Immediate 


lis 


Rx,value 











lmw 


RT,D(RA) 


Load Multiple Word 









lscbx 


RT,RA,RB 


Load String and Compare Byte Indexed (601 specific) 


lscbx. 


RT,RA,RB 











lswi RT,RA,NB 



Load String Word Immediate 



lswx 


RT,RA,RB 


Load String Word Indexed 








lvebx 


VT,RA,RB 


Load Vector Element Byte Indexed (AltiVec specific) 








lvehx 


VT,RA,RB 


Load Vector Element Halfword Indexed (AltiVec specific) 








lvewx 


VT,RA,RB 


Load Vector Element Word Indexed (AltiVec specific) 








lvsl 


VT,RA,RB 


Load Vector for Shift Left (AltiVec specific) 








lvsr 


VT,RA,RB 


Load Vector for Shift Right (AltiVec specific) 








lvx 


VT,RA,RB 


Load Vector Indexed (AltiVec specific) 








lvxl 


VT,RA,RB 


Load Vector Indexed LRU (AltiVec specific) 









lwa 


RT,DS(RA) 


Load Word Algebraic 









lwarx 


RT,RA,RB 


Load Word and Reserve Indexed 
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lwaux 



RT,RA,RB Load Word Algebraic with Update Indexed 



lwax 


RT,RA,RB 


Load Word Algebraic Indexed 









lwbrx 


RT,RA,RB 


Load Word Byte-Reverse Indexed 









lwsync 



Light-Weight Sync Operation 



lwz 


RT,D(RA) 


Load Word and Zero 









lwzu 


RT,D(RA) 


Load Word and Zero with Update 









lwzux RT,RA,RB Load Word and Zero with Update Indexed 



lwzx 



RT,RA,RB 



Load Word and Zero Indexed 



M 



Operator 


Operands 


Operation Name 


maskg 


RA,RS,RB 


Mask Generate (601 specific) 


maskg. 


RA,RS,RB 











maskir 


RA,RS,RB 


Mask Insert From Register (601 specific) 


maskir. 


RA,RS,RB 











mcrf 


CRF,CRF 


Move Condition Register Field 


mcrf 


BF,BFA 
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mcrfs 


BF,BFA 


Move to Condition Register from FPSCR 


mcrfs 


CRF,BFA 











mcrxr 



mcrxr 



BF Move to Condition Register from XER 
CRF 



mfcr 


RT 


Move From Condition Register 


mfcr 


RT,FXM 











mfctr RT Move From Count Register 



mffs 


FRT 


Move From FPSCR 


mffs. 


FRT 











mfmsr 


RT 


Move From Machine State Register 









mfspr 


RT,SPR 


Move From Special Purpose Register 


mfxer 


Rx 


Fixed-Point Exception Register (equiv. to m f s p r 1 , 


Rx) 


mflr 


Rx 


Link Register (equiv. to mfspr 8 , Rx) 


mfctr 


Rx 


Count Register (equiv. to mfspr 8 , Rx) 


mfdsisr 


Rx 


Data Storage Interrupt Status Register (macro) 


mfdar 


Rx 


Data Address Register (macro) 


mfdec 


Rx 


Decrementer (macro) 


mfear 


Rx 


Move from External Address (Equiv. to mfspr 282 


, Rx) 


mfsdrl 


Rx 


Storage Description Register 1 (macro) 


mfsrrO 


Rx 


Save /Restore Register (macro) 


mfsrrl 


Rx 


Save /Restore Register 1 (macro) 


mfsprg 


n,Rx 


Special Purpose Register n (macro) 
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mfasr 


Rx 


Address Space Register (macro) 


mfmq 


Rx 


Move from MQ Register (601 Only) (Equiv to mf s p r , Rx) 


mfrtcd 


Rx 


Real Time Clock Divisor (macro) 


mfrtcl 


Rx 


Move from Real Time Clock Lower (601 Only) (Equiv. to m f s p r 5 , 


Rx) 


mfrtcu 


Rx 


Move from Real Time Clock Upper (601 Only) (Equiv. to mf s p r 4 , 


Rx) 


mfrtci 


Rx 


Real Time Clock Increment (macro) 


mfpvr 


Rx 


Processor Version Register (macro) 


mfibatu 


n,Rx 


IBAT Register n, Upper (macro) 


mfibatl 


n,Rx 


IBAT Register n, Lower (macro) 


mfdbatu 


n,Rx 


DBAT Register n, Upper (macro) 


mfdbatl 


n,Rx 


DBAT Register n, Lower (macro) 









mfsr RT,SR Move From Segment Register 



mfsrin 



RT,RB Move From Segment Register Indirect 



mftb 


RT 


Move from Time Base 


mftb 


RLTBR 











mftbu RT Move from Time Base Upper 



mfvscr VT Move From Vector Status and Control Register (AltiVec specific) 



mi 


Rx,Ry 


Move Register 


mr. 


Rx,Ry 











mtcrf 


FXM,RT 


Move to Condition Register Fields 
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mtfsbO 


BT 


Move to FPSCR Bit 


mtfsbO. 


BT 











mtfsbl 


BT 


Move to FPSCR Bit 1 


mtfsbl. 


BT 











mtfsf 


FLM,FRB 


Move to FPSCR Fields 


mtfsf. 


FLM,FRB 











mtfsfi 


BF,U 


Move to FPSCR Field Immediate 


mtfsfi. 


BF,U 




mtfs 


Rx 


Equiv. to mtfsf OxFF,Rx 


mtfs. 


Rx 


Equiv. to mtfsf . OxFF, Rx 









mtmsr 


RT 


Move to Machine State Register 


mtmsrd 


RA 




mtmsrd 


RA,L 











mtspr 


SPR,RT 


Move To Special Purpose Register 


mtxer 


Rx 


Fixed-Point Exception Register (equiv. to mt s p r 1 , Rx) 


mtlr 


Rx 


Link Register (equiv. to mt s p r 8 , Rx) 


mtctr 


Rx 


Count Register (equiv. to mtspr 8 , Rx) 


mtdsisr 


Rx 


Data Storage Interrupt Status Register (macro) 


mtdar 


Rx 


Data Address Register (macro) 


mtdec 


Rx 


Decrementer (macro) 


mtear 


Rx 


Move to External Address Register (Equiv. to mtspr 282 , Rx) 


mtsdrl 


Rx 


Storage Description Register 1 (macro) 


mtsrrO 


Rx 


Save/Restore Register (macro) 
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mtsrrl 


Rx 


Save/Restore Register 1 (macro) 


mtsprg 


n,Rx 


Special Purpose Register n (macro) 


mtasr 


Rx 


Address Space Register (macro) 


mtmq 


Rx 


Move to MQ Register (601 Only) (Equiv. tomtspr , Rx) 


mtrtcd 


Rx 


Real Time Clock Divisor (macro) 


mtrtcl 


Rx 


Move to Real Time Clock Lower (601 Only) (Equiv. to mt s p r 2 1 , Rx) 


mtrtcu 


Rx 


Move to Real Time Clock Upper (601 Only) (Equiv. tomtspr 20, Rx) 


mtrtci 


Rx 


Real Time Clock Increment (macro) 


mtibatu 


n,Rx 


IBAT Register n, Upper (macro) 


mtibatl 


n,Rx 


IBAT Register n, Lower (macro) 


mtdbatu 


n,Rx 


DBAT Register n, Upper (macro) 


mtdbatl 


n,Rx 


DBAT Register n, Lower (macro) 









mtsr 


SR,RT 


Move to Segment Register 


mtsrin 


RT,RB 


Move to Segment Register Indirect 









mttbu 


RB 


Move to Time Base Upper (Equiv. to mtspr 285 , RB) 


mttrbl 


RB 


Move to Time Base Lower (Equiv. to mtspr 284 , RB) 








mtvscr 


VB 


Move To Vector Status and Control Register (AltiVec specific) 









mul 


RT,RA,RB 


Multiply (601 specific) 


mul. 


RT,RA,RB 




mulo 


RT,RA,RB 




mulo. 


RT,RA,RB 











mulhd 


RT,RA,RB 


Multiply High Doubleword 


mulhd. 


RT,RA,RB 
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mulhdu 


RT,RA,RB 


Multiply High Doubleword Unsigned 


mulhdu. 


RT,RA,RB 











mulhw 


RT,RA,RB 


Multiply High Word 


mulhw. 


RT,RA,RB 











mulhwu RT,RA,RB Multiply High Word Unsigned 
mulhwu. RT,RA,RB 



mulld 


RT,RA,RB 


Multiply Low Doubleword 


mulld. 


RT,RA,RB 




mulldo 


RT,RA,RB 




mulldo. 


RT,RA,RB 











mullw 


RT,RA,RB 


Multiply Low 


mullw. 


RT,RA,RB 




mullwo 


RT,RA,RB 




mullwo. 


RT,RA,RB 











mulli 



RT,RA,SI Multiply Low Immediate 



N 



Operator 


Operands 


Operation Name 


nabs 


RT,RA 


Negative Absolute (601 specific) 


nabs. 


RT,RA 




nabso 


RT,RA 




nabso. 


RT,RA 
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nand 


RA,RT,RB 


NAND 


nand. 


RA,RT,RB 











neg 


RT,RA 


Negate 


neg. 


RT,RA 




nego 


RT,RA 




nego. 


RT,RA 











nop 




No-op 









nor 


RA,RT,RB 


Nor 


nor. 


RA,RT,RB 











not RA,RT 
not. RA,RT 



Not 



o 



Operator 


Operands 


Operation Name 


or 


RA,RT,RB 


OR 


or. 


RA,RT,RB 











ore 


RA,RT,RB 


OR with Complement 


ore. 


RA,RT,RB 











on 



RA,RT,UI OR Immediate 



oris RA,RT,UI OR Immediate Shifted 
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Operator 


Operands 


Operation Name 


ptesync 




Page Table Entry Synchronize 









R 



Operator 


Operands 


Operation Name 


rfi 




Return From Interrupt 


rfid 




Return From Interrupt Doubleword 









rldcl 


RA,RS,RB,mb 


Rotate Left Doubleword then Clear Left 


rldcl. 


RA,RS,RB,mb 











rider 


RA,RS,RB,mb 


Rotate Left Doubleword then Clear Right 


rider. 


RA,RS,RB,mb 











rldic 


RA,RS,sh,mb 


Rotate Left Doubleword Immediate then Clear 


rldic. 


RA,RS,sh,mb 











rldicl 



RA,RS,sh,mb 



Rotate Left Doubleword Immediate then Clear Left 



rldicl. 



RA,RS,sh,mb 



rldicr 



RA,RS,sh,mb Rotate Left Doubleword Immediate then Clear 



rldicr. 



RA,RS,sh,mb Right 



rldimi 
rldimi. 



RA,RS,sh,mb Rotate Left Doubleword then Mask Insert 
RA,RS,sh,mb 
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rlmi 



rlmi. 



RA,RS,RB,MB,ME Rotate Left then Mask Insert (601 specific) 



RA,RS,RB,MB,ME 



rlmi 


RA,RS,RB,BM 


Rotate Left then Mask Insert (601 specific) 


rlmi. 


RA,RS,RB,BM 











rlwimi 


RA,RS,SH,MB,ME 


Rotate Left Word Immediate then Mask Insert 


rlwimi. 


RA,RS,SH,MB,ME 











rlwimi 


RA,RS,SH,BM 


Rotate Left Word Immediate then Mask Insert 


rlwimi. 


RA,RS,SH,BM 











rlwinm RA,RS,SH,MB,ME Rotate Left Word Immediate then AND with Mask 



rlwinm. RA,RS,SH,MB,ME 



rlwinm RA,RS,SH,BM 
rlwinm. RA,RS,SH,BM 



Rotate Left Word Immediate then AND with Mask 



rlwnm 


RA,RS,RB,MB,ME 


Rotate Left Word then AND with Mask 


rlwnm. 


RA,RS,RB,MB,ME 











rlwnm 


RA,RS,SH,BM 


Rotate Left Word then AND with Mask 


rlwnm. 


RA,RS,SH,BM 











rotld 


ra,rs,rb 


Macro: rl did ra,rs,rb,0 


rotld. 


ra,rs,rb 


Macro: rid id. ra,rs,rb,0 


rotldi 


ra,rs,n 


Macro: rid id ra,rs,n,0 
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rotldi. 


ra,rs,n 


Macro: rid id. ra,rs,n,0 


rotlw 


ra,rs,rb 


Macro: rlwnm ra , rs , rb , , 31 


rotlw. 


ra,rs,rb 


Macro: rl wnm. ra , rs , rb ,0 ,31 


rotlwi 


ra,rs,n 


Macro: rl wi nm ra,rs,n,0,31 


rotlwi. 


ra,rs,n 


Macro: rl wi nm. ra,rs,n,0,31 









rotrdi 


ra,rs,n 


Macro: rl did ra,rs,64-n,0 


rotrdi. 


ra,rs,n 


Macro: rl di cl . ra,rs,64-n,0 


rotrwi 


ra,rs,n 


Macro: rl wi nm ra , rs , 32-n , , 31 


rotrwi. 


ra,rs,n 


Macro: rl wi nm. ra , rs , 32-n ,0 ,31 









rrib 
rrib. 



RA,RS,RB Rotate Right and Insert Bit (601 specific) 
RA,RS,RB 



Operator 


Operands 


Operation Name 


sc 




System Call 









slbia Segment Lookaside Buffer Invalidate All 



slbie RB Segment Lookaside Buffer Invalidate Entry 



slbmfee RS,RB SLB Move From Entry ESID 
slbmfev RS,RB SLB Move From Entry VSID 



slbmte RS,RB SLB Move To Entry 



sld 


RA,RS,RB 


Shift Left Doubleword 
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sld. 


RA,RS,RB 











sldi 


ra,rs,n 


Macro: rl di cr ra,rs,n,63-n 


sldi. 


ra,rs,n 


Macro: rl di cr . ra,rs,n,63-n 


slwi 


ra,rs,n 


Macro: rlwi nm ra , rs , n , ,31-n 


slwi. 


ra,rs,n 


Macro: rlwinm. ra , rs ,n ,0 ,31-n 









sle 


RA,RS,RB 


Shift Left Extended (601 specific) 


sle. 


RA,RS,RB 











sleq 


RA,RS,RB 


Shift Left Extended with MQ (601 specific) 


sleq. 


RA,RS,RB 











sliq 


RA,RS,SH 


Shift Left Immediate with MQ (601 specific) 


sliq. 


RA,RS,SH 











slliq 


RA,RS,SH 


Shift Left Long Immediate with MQ (601 specific) 


slliq. 


RA,RS,SH 











sliq 


RA,RS,RB 


Shift Left Long with MQ (601 specific) 


sliq. 


RA,RS,RB 











slq 


RA,RS,RB 


Shift Left with MQ (601 specific) 


slq. 


RA,RS,RB 











slw 


RA,RS,RB 


Shift Left Word 


slw. 


RA,RS,RB 
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srad 


RA,RS,RB 


Shift Right Algebraic Doubleword 


srad. 


RA,RS,RB 











sradi 


RA,RS,sh 


Shift Right Algebraic Doubleword Immediate 


sradi. 


RA,RS,sh 











sraiq RA,RS,SH Shift Right Algebraic Immediate with MQ (601 specific) 
sraiq. RA,RS,SH 



sraq 


RA,RS,RB 


Shift Right Algebraic with MQ (601 specific) 


sraq. 


RA,RS,RB 











sraw 


RA,RS,RB 


Shift Right Algebraic Word 


sraw. 


RA,RS,RB 











srawi 


RA,RS,SH 


Shift Right Algebraic Word Immediate 


srawi. 


RA,RS,SH 











srd 


RA,RS,RB 


Shift Right Doubleword 


srd. 


RA,RS,RB 




srdi 


ra,rs,n 


Macro: rl di cl ra,rs,64-n,n 


srdi. 


ra,rs,n 


Macro: rl di cl . ra,rs,64-n,n 


srwi 


ra,rs,n 


Macro: rlwi nm ra , rs ,32-n , n ,31 


srwi. 


ra,rs,n 


Macro: rlwi nm. ra , rs , 32-n , n , 31 









sre 


RA,RS,RB 


Shift Right Extended (601 specific) 


sre. 


RA,RS,RB 
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srea 


RA,RS,RB 


Shift Right Extended Algebraic (601 specific) 


srea. 


RA,RS,RB 











sreq 


RA,RS,RB 


Shift Right Extended with MQ (601 specific) 


sreq. 


RA,RS,RB 











sriq 


RA,RS,SH 


Shift Right Immediate with MQ (601 specific) 


sriq. 


RA,RS,SH 











srliq 


RA,RS,SH 


Shift Right Long Immediate with MQ (601 specific) 


srliq. 


RA,RS,SH 











sriq 



RA,RS,RB Shift Right Long with MQ (601 specific) 



sriq. 



RA,RS,RB 



srq 


RA,RS,RB 


Shift Right with MQ (601 specific) 


srq. 


RA,RS,RB 











srw 


RA,RS,RB 


Shift Right Word 


srw. 


RA,RS,RB 











stb 



RT,D(RA) Store Byte 



stbu 


RLD(RA) 


Store Byte with Update 









stbux RT,RA,RB Store Byte with Update Indexed 
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stbx 


RT,RA,RB 


Store Byte Indexed 









std RT,DS(RA) Store Doubleword 



stdcx. 


RT,RA,RB 


Store Doubleword Conditional Indexed 









stdu 


RT,DS(RA) 


Store Doubleword with Update 









stdux 


RT,RA,RB 


Store Doubleword with Update Indexed 









stdx 


RT,RA,RB 


Store Doubleword Indexed 









stfd 


FRT,D(RA) 


Store Floating-Point Double 









stfdu 


FRT,D(RA) 


Store Floating-Point Double with Update 









stfdux 


FRT,RA,RB 


Store Floating-Point Double with Update Indexed 









stfdx 


FRT,RA,RB 


Store Floating-Point Double Indexed 









stfiwx 



FRT,RA,RB Store Floating-Point as Integer Word Indexed 



stfs FRT,D(RA) 



Store Floating-Point Single 



stfsu 


FRT,D(RA) 


Store Floating-Point Single with Update 









stfsux 



FRT,RA,RB Store Floating-Point Single with Update Indexed 
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stfsx 


FRT,RA,RB 


Store Floating-Point Single Indexed 









sth 


RT,D(RA) 


Store Halfword 









sthbrx 



RT,RA,RB Store Halfword Byte-Reverse Indexed 



sthu 


RT,D(RA) 


Store Halfword with Update 









sthux 


RT,RA,RB 


Store Halfword with Update Indexed 









sthx 


RT,RA,RB 


Store Halfword Indexed 









stvebx 


VS,RA,RB 


Store Vector Element Byte Indexed (AltiVec specific) 








stvehx 


VS,RA,RB 


Store Vector Element Halfword Indexed (AltiVec specific) 








stvewx 


VS,RA,RB 


Store Vector Element Word Indexed (AltiVec specific) 








stvx 


VS,RA,RB 


Store Vector Indexed (AltiVec specific) 








stvxl 


VS,RA,RB 


Store Vector Indexed LRU (AltiVec specific) 









stmw RT,D(RA) 



Store Multiple Word 



stswi 



RT,RA,NB Store String Word Immediate 



stswx 


RT,RA,RB 


Store String Word Indexed 









stw 



RT,D(RA) Store Word 
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stwbrx RT,RA,RB Store Word Byte-Reverse Indexed 



stwcx. 


RT,RA,RB 


Store Word Conditional Indexed 









stwu 


RT,D(RA) 


Store Word with Update 









stwux RT,RA,RB Store Word with Update Indexed 



stwx 


RT,RA,RB 


Store Word Indexed 









sub RT,RB,RA 



sub. RT,RB,RA 



subo RT,RB,RA 
subo. RT,RB,RA 



Equiv. to subf RT,RA,RB 



Equiv. to subf . RT,RA,RB 



Equiv. to subfo RT,RA,RB 
Equiv. to subf o. RT,RA,RB 



subc 


RT,RB,RA 


Equiv. to subfc RT,RA,RB 


subc. 


RT,RB,RA 


Equiv. to subf c. RT,RA,RB 


subco 


RT,RB,RA 


Equiv. to subf co RT,RA,RB 


subco. 


RT,RB,RA 


Equiv. to subf co. RT,RA,RB 









subf RT,RA,RB Subtract From 
subf. RT,RA,RB 



subfo RT,RA,RB 



subfo. RT,RA,RB 




RT,RA,RB 
RT,RA,RB 
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subfco 


RT,RA,RB 




sub f co. 


RT,RA,RB 











subfe RT,RA,RB Subtract From Extended 



subfe. RT,RA,RB 



subfeo RT,RA,RB 



subfeo. RT,RA,RB 



subfic 


RT,RA,SI 


Subtract From Immediate Carrying 









subfme 


RT,RA 


Subtract From Minus One Extended 


subfme. 


RT,RA 




subfmeo 


RT,RA 




subfmeo. 


RT,RA 











subfze 


RT,RA 


Subtract From Zero Extended 


subfze. 


RT,RA 




subfzeo 


RT,RA 




subfzeo. 


RT,RA 











subi 


Rx,Ry,value 


Equiv. to add i Rx , Ry , -value 


subic 


Rx,Ry,value 


Equiv. to add i c Rx,Ry, -value 


subic. 


Rx,Ryvalue 


Equiv. to add i c . Rx , Ry , -value 


subis 


Rx,Ry,value 


Equiv. to add i s Rx , Ry , -value 









sync 




Synchronize 


sync 


L 
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Operator 


Operands 


Operation Name 


td 


TO,RA,RB 


Trap Doubleword 


tdeq 


RA,RB 


if equal 


tdne 


RA,RB 


if not equal 


tdgt 


RA,RB 


if greater than 


tdge 


RA,RB 


if greater than or equal 


tdng 


RA,RB 


if not greater than 


tdlt 


RA,RB 


if less than 


tdle 


RA,RB 


if less than or equal 


tdnl 


RA,RB 


if not less than 


tdlgt 


RA,RB 


if logically greater than 


tdlge 


RA,RB 


if logically greater than or equal 


tdlng 


RA,RB 


if logically not greater than 


tdllt 


RA,RB 


if logically less than 


tdlle 


RA,RB 


if logically less than or equal 


tdlnl 


RA,RB 


if logically not less than 









tdi 


TO,RA,SI 


Trap Doubleword Immediate 


tdeqi 


RA,SI 


if equal 


tdnei 


RA,SI 


if not equal 


tdgti 


RA,SI 


if greater than 


tdgei 


RA,SI 


if greater than or equal 


tdngi 


RA,SI 


if not greater than 


tdlti 


RA,SI 


if less than 


tdlei 


RA,SI 


if less than or equal 


tdnli 


RA,SI 


if not less than 


tdlgti 


RA,SI 


if logically greater than 
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tdlgei 


RA,SI 


if logically greater than or equal 


tdlngi 


RA,SI 


if logically not greater than 


tdllti 


RA,SI 


if logically less than 


tdllei 


RA,SI 


if logically less than or equal 


tdlnli 


RA,SI 


if logically not less than 









tibia Translation Lookaside Buffer Invalidate All 



tlbie 


RB 


Translation Lookaside Buffer Invalidate Entry 


tlbie 


RB,L 




tlbiel 


RB 


Translation Lookaside Buffer Invalidate Entry Local 









tlbld RB 



Load Data TLB Entry (603 specific) 



tlbli RB 



Load Instruction TLB Entry (603 specific) 



tlbsync 




TLB Synchronize 









trap 




Trap Unconditionally 









tw 


TO,RA,RB 


Trap Word 


tweq 


RA,RB 


if equal 


twne 


RA,RB 


if not equal 


twgt 


RA,RB 


if greater than 


twge 


RA,RB 


if greater than or equal 


twng 


RA,RB 


if not greater than 


twit 


RA,RB 


if less than 


twle 


RA,RB 


if less than or equal 


twnl 


RA,RB 


if not less than 
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twlgt 


RA,RB 


if logically greater than 


twlge 


RA,RB 


if logically greater than or equal 


twlng 


RA,RB 


if logically not greater than 


twllt 


RA,RB 


if logically less than 


twlle 


RA,RB 


if logically less than or equal 


twlnl 


RA,RB 


if logically not less than 










twi 


TO,RA,SI 


Trap Word Immediate 


tweqi 


RA,RB 


if equal 


twnei 


RA,RB 


if not equal 


twgti 


RA,RB 


if greater than 


twgei 


RA,RB 


if greater than or equal 


twngi 


RA,RB 


if not greater than 


twlti 


RA,RB 


if less than 


twlei 


RA,RB 


if less than or equal 


twnli 


RA,RB 


if not less than 


twlgti 


RA,RB 


if logically greater than 


twlgei 


RA,RB 


if logically greater than or equal 


twlngi 


RA,RB 


if logically not greater than 


twllti 


RA,RB 


if logically less than 


twllei 


RA,RB 


if logically less than or equal 


twlnli 


RA,RB 


if logically not less than 



V 



Operator 


Operands 


Operation Name 


vaddcuw 


VT,VA,VB 


Vector Add Carry-out Unsigned Word (AltiVec specific) 








vaddfp 


VT,VA,VB 


Vector Add Float (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vaddsbs 


VT,VA,VB 


Vector Add Signed Byte Saturate (AltiVec specific) 








vaddshs 


VT,VA,VB 


Vector Add Signed Halfword Saturate (AltiVec specific) 








vaddsws 


VT,VA,VB 


Vector Add Signed Word Saturate (AltiVec specific) 








vaddubm 


VT,VA,VB 


Vector Add Unsigned Byte Modulo (AltiVec specific) 








vaddubs 


VT,VA,VB 


Vector Add Unsigned Byte Saturate (AltiVec specific) 








vadduhm 


VT,VA,VB 


Vector Add Unsigned Halfword Modulo (AltiVec specific) 








vadduhs 


VT,VA,VB 


Vector Add Unsigned Halfword Saturate (AltiVec specific) 








vadduwm 


VT,VA,VB 


Vector Add Unsigned Word Modulo (AltiVec specific) 








vadduws 


VT,VA,VB 


Vector Add Unsigned Word Saturate (AltiVec specific) 








vand 


VT,VA,VB 


Vector Logical AND (AltiVec specific) 








vandc 


VT,VA,VB 


Vector Logical AND with Complement (AltiVec specific) 








vmaddfp 


VT,VA,VC,VB 


Vector Multiply-Add Float (AltiVec specific) 








vavgsb 


VT,VA,VB 


Vector Average Signed Byte (AltiVec specific) 








vavgsh 


VT,VA,VB 


Vector Average Signed Halfword (AltiVec specific) 








vavgsw 


VT,VA,VB 


Vector Average Signed Word (AltiVec specific) 








vavgub 


VT,VA,VB 


Vector Average Unsigned Byte (AltiVec specific) 








vavguh 


VT,VA,VB 


Vector Average Unsigned Halfword (AltiVec specific) 








vavguw 


VT,VA,VB 


Vector Average Unsigned Word (AltiVec specific) 








vcfsx 


VT,VB,UIM 


Vector Convert From Signed fiXed-point word (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vcfux 


VT,VB,UIM 


Vector Convert From Unsigned fiXed-point word (AltiVec specific) 








vcmpbfp 


VT,VA,VB 


Vector Compare Bounds Float [Record] (AltiVec specific) 


vcmpbfp. 


VT,VA,VB 










vcmpeqfp 


VT,VA,VB 


Vector Compare Equal-To Float [Record] (AltiVec specific) 


vcmpeqfp. 


VT,VA,VB 










vcmpequb 


VT,VA,VB 


Vector Compare Equal-To Unsigned Byte [Record] (AltiVec specific) 


vcmpequb. 


VT,VA,VB 










vcmpequh 


VT,VA,VB 


Vector Compare Equal-To Unsigned Halfword [Record] (AltiVec 
specific) 


vcmpequh. 


VT,VA,VB 










vcmpequw 


VT,VA,VB 


Vector Compare Equal-To Unsigned Word [Record] (AltiVec specific) 


vcmpequw. 


VT,VA,VB 










vcmpgefp 


VT,VA,VB 


Vector Compare Greater-Than-or-Equal-To Float [Record] (AltiVec 
specific) 


vcmpgefp. 


VT,VA,VB 










vcmpgtfp 


VT,VA,VB 


Vector Compare Greater-Than Float [Record] (AltiVec specific) 


vcmpgtfp. 


VT,VA,VB 










vcmpgtsb 


VT,VA,VB 


Vector Compare Greater-Than Signed Byte [Record] (AltiVec specific) 


vcmpgtsb. 


VT,VA,VB 










vcmpgtsh 


VT,VA,VB 


Vector Compare Greater-Than Signed Halfword [Record] (AltiVec 
specific) 


vcmpgtsh. 


VT,VA,VB 










vcmpgtsw 


VT,VA,VB 


Vector Compare Greater-Than Signed Word [Record] (AltiVec 
specific) 


vcmpgtsw. 


VT,VA,VB 
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Operator 


Operands 


Operation Name 


vcmpgtub 


VT,VA,VB 


Vector Compare Greater-Than Unsigned Byte [Record] (AltiVec 
specific) 


vcmpgtub. 


VT,VA,VB 










vcmpgtuh 


VT,VA,VB 


Vector Compare Greater-Than Unsigned Halfword [Record] (AltiVec 
specific) 


vcmpgtuh. 


VT,VA,VB 










vcmpgtuw 


VT,VA,VB 


Vector Compare Greater-Than Unsigned Word [Record] (AltiVec 
specific) 


vcmpgtuw. 


VT,VA,VB 










vctsxs 


VT,VB,UIM 


Vector Convert To Signed fiXed-point word Saturate (AltiVec 
specific) 








vctuxs 


VT,VB,UIM 


Vector Convert To Unsigned fiXed-point word Saturate (AltiVec 
specific) 








vexptefp 


VT,VB 


Vector 2 Raised to the Exponent Estimate Float (AltiVec specific) 








vlogefp 


VT,VB 


Vector Log 2 Estimate Float (AltiVec specific) 








vmaxfp 


VT,VA,VB 


Vector Maximum Float (AltiVec specific) 








vmaxsb 


VT,VA,VB 


Vector Maximum Signed Byte (AltiVec specific) 








vmaxsh 


VT,VA,VB 


Vector Maximum Signed Halfword (AltiVec specific) 








vmaxsw 


VT,VA,VB 


Vector Maximum Signed Word (AltiVec specific) 






vmaxub 


VT,VA,VB 


Vector Maximum Unsigned Byte (AltiVec specific) 








vmaxuh 


VT,VA,VB 


Vector Maximum Unsigned Halfword (AltiVec specific) 








vmaxuw 


VT,VA,VB 


Vector Maximum Unsigned Word (AltiVec specific) 








vmhaddshs 


VT,VA,VB,VC 


Vector Multiply-High and Add Signed Halfword Saturate (AltiVec 
specific) 
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Operator 


Operands 


Operation Name 


vmhraddshs 


VT,VA,VB,VC 


Vector Multiply-High Round and Add Signed Halfword Saturate 
(AltiVec specific) 








vminfp 


VT,VA,VB 


Vector Minimum Float (AltiVec specific) 








vminsb 


VT,VA,VB 


Vector Minimum Signed Byte (AltiVec specific) 








vminsh 


VT,VA,VB 


Vector Minimum Signed Halfword (AltiVec specific) 








vminsw 


VT,VA,VB 


Vector Minimum Signed Word (AltiVec specific) 








vminub 


VT,VA,VB 


Vector Minimum Unsigned Byte (AltiVec specific) 








vminuh 


VT,VA,VB 


Vector Minimum Unsigned Halfword (AltiVec specific) 








vminuw 


VT,VA,VB 


Vector Minimum Unsigned Word (AltiVec specific) 








vmladduhm 


VT,VA,VB,VC 


Vector Multiply-Low and Add Unsigned Halfword Modulo (AltiVec 
specific) 








vmr 


VT,VS 


Vector Move Register (AltiVec specific) 








vmrghb 


VT,VA,VB 


Vector Merge High Byte (AltiVec specific) 








vmrghh 


VT,VA,VB 


Vector Merge High Halfword (AltiVec specific) 








vmrghw 


VT,VA,VB 


Vector Merge High Word (AltiVec specific) 








vmrglb 


VT,VA,VB 


Vector Merge Low Byte (AltiVec specific) 








vmrglh 


VT,VA,VB 


Vector Merge Low Halfword (AltiVec specific) 








vmrglw 


VT,VA,VB 


Vector Merge Low Word (AltiVec specific) 








vrsqrtefp 


VT,VB 


Vector Reciprocal Square Root Estimate Float (AltiVec specific) 








vmsummbm 


VT,VA,VB,VC 


Vector Multiply-Sum Mixed-sign Byte Modulo (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vmsumshm 


VT,VA,VB,VC 


Vector Multiply-Sum Signed Halfword Modulo (AltiVec specific) 








vmsumshs 


VT,VA,VB,VC 


Vector Multiply-Sum Signed Halfword Saturate (AltiVec specific) 








vmsumubm 


VT,VA,VB,VC 


Vector Multiply-Sum Unsigned Byte Modulo (AltiVec specific) 








vmsumuhm 


VT,VA,VB,VC 


Vector Multiply-Sum Unsigned Halfword Modulo (AltiVec specific) 








vmsumuhs 


VT,VA,VB,VC 


Vector Multiply-Sum Unsigned Halfword Saturate (AltiVec specific) 








vmulesb 


VT,VA,VB 


Vector Multiply Even Signed Byte (AltiVec specific) 








vmuleub 


VT,VA,VB 


Vector Multiply Even Unsigned Byte (AltiVec specific) 








vmulesh 


VT,VA,VB 


Vector Multiply Even Signed Halfword (AltiVec specific) 








vmuleuh 


VT,VA,VB 


Vector Multiply Even Unsigned Halfword (AltiVec specific) 








vmulosb 


VT,VA,VB 


Vector Multiply Odd Signed Byte (AltiVec specific) 








vmuloub 


VT,VA,VB 


Vector Multiply Odd Unsigned Byte (AltiVec specific) 








vmulosh 


VT,VA,VB 


Vector Multiply Odd Signed Halfword (AltiVec specific) 








vmulouh 


VT,VA,VB 


Vector Multiply Odd Unsigned Halfword (AltiVec specific) 








vnmsubfp 


VT,VA,VC,VB 


Vector Negative Multiply-Subtract Float (AltiVec specific) 








vnor 


VT,VA,VB 


Vector Logical NOR (AltiVec specific) 








vnot 


VT,VS 


Vector Logical Complement (AltiVec specific) 








vor 


VT,VA,VB 


Vector Logical OR (AltiVec specific) 








vperm 


VT,VA,VB,VC 


Vector Permute (AltiVec specific) 








vpkpx 


VT,VA,VB 


Vector Pack Pixel32 (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vpkshss 


VT,VA,VB 


Vector Pack Signed Halfword Signed Saturate (AltiVec specific) 








vpkshus 


VT,VA,VB 


Vector Pack Signed Halfword Unsigned Saturate (AltiVec specific) 








vpkswss 


VT,VA,VB 


Vector Pack Signed Word Signed Saturate (AltiVec specific) 








vpkswus 


VT,VA,VB 


Vector Pack Signed Word Unsigned Saturate (AltiVec specific) 








vpkuhum 


VT,VA,VB 


Vector Pack Unsigned Halfword Unsigned Modulo (AltiVec specific) 








vpkuhus 


VT,VA,VB 


Vector Pack Unsigned Halfword Unsigned Saturate (AltiVec specific) 








vpkuwum 


VT,VA,VB 


Vector Pack Unsigned Word Unsigned Modulo (AltiVec specific) 








vpkuwus 


VT,VA,VB 


Vector Pack Unsigned Word Unsigned Saturate (AltiVec specific) 








vrefp 


VT/VB 


Vector Reciprocal Estimate Float (AltiVec specific) 








vrfim 


VT,VB 


Vector Round to Floating-Point Integer toward Minus infinity 
(AltiVec specific) 








vrfin 


VT,VB 


Vector Round to Floating-Point Integer Nearest (AltiVec specific) 








vrfip 


VT,VB 


Vector Round to Floating-Point Integer toward Positive infinity 
(AltiVec specific) 








vrfiz 


VT,VB 


Vector Round to Floating-Point Integer toward Zero (AltiVec specific) 








vrlb 


VT,VA,VB 


Vector Rotate Left Integer Byte (AltiVec specific) 








vrlh 


VT,VA,VB 


Vector Rotate Left Integer Halfword (AltiVec specific) 








vrlw 


VT,VA,VB 


Vector Rotate Left Integer Word (AltiVec specific) 








vsel 


VT,VA,VB,VC 


Vector Conditional Select (AltiVec specific) 








vsl 


VT,VA,VB 


Vector Shift Left (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vslb 


VT,VA,VB 


Vector Shift Left Integer Byte (AltiVec specific) 








vsldoi 


VT,VA,VB,SH 


Vector Shift Left Double by Octet Immediate (AltiVec specific) 








vslh 


VT,VA,VB 


Vector Shift Left Integer Halfword (AltiVec specific) 








vslo 


VT,VA,VB 


Vector Shift Left by Octet (AltiVec specific) 








vslw 


VT,VA,VB 


Vector Shift Left Integer Word (AltiVec specific) 








vspltb 


VT,VB,UIM 


Vector Splat Byte (AltiVec specific) 








vsplth 


VT,VB,UIM 


Vector Splat Halfword (AltiVec specific) 








vspltisb 


VT,SIM 


Vector Splat Immediate Signed Byte (AltiVec specific) 








vspltish 


VT,SIM 


Vector Splat Immediate Signed Halfword (AltiVec specific) 








vspltisw 


VT,SIM 


Vector Splat Immediate Signed Word (AltiVec specific) 








vspltw 


VT,VB,UIM 


Vector Splat Word (AltiVec specific) 








vsr 


VT,VA,VB 


Vector Shift Right (AltiVec specific) 








vsrab 


VT,VA,VB 


Vector Shift Right Algebraic Byte (AltiVec specific) 








vsrah 


VT,VA,VB 


Vector Shift Right Algebraic Halfword (AltiVec specific) 








vsraw 


VT,VA,VB 


Vector Shift Right Algebraic Word (AltiVec specific) 








vsrb 


VT,VA,VB 


Vector Shift Right Byte (AltiVec specific) 








vsrh 


VT,VA,VB 


Vector Shift Right Halfword (AltiVec specific) 








vsro 


VT,VA,VB 


Vector Shift Right by Octet (AltiVec specific) 








vsrw 


VT,VA,VB 


Vector Shift Right Word (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vsubcuw 


VT,VA,VB 


Vector Subtract & write Carry-out Unsigned Word (AltiVec specific) 








vsubfp 


VT,VA,VB 


Vector Subtract Float (AltiVec specific) 








vsubsbs 


VT,VA,VB 


Vector Subtract Signed Byte Saturate (AltiVec specific) 








vsubshs 


VT,VA,VB 


Vector Subtract Signed Halfword Saturate (AltiVec specific) 








vsubsws 


VT,VA,VB 


Vector Subtract Signed Word Saturate (AltiVec specific) 








vsububm 


VT,VA,VB 


Vector Subtract Unsigned Byte Modulo (AltiVec specific) 








vsububs 


VT,VA,VB 


Vector Subtract Unsigned Byte Saturate (AltiVec specific) 








vsubuhm 


VT,VA,VB 


Vector Subtract Unsigned Halfword Modulo (AltiVec specific) 








vsubuhs 


VT,VA,VB 


Vector Subtract Unsigned Halfword Saturate (AltiVec specific) 








vsubuwm 


VT,VA,VB 


Vector Subtract Unsigned Word Modulo (AltiVec specific) 








vsubuws 


VT,VA,VB 


Vector Subtract Unsigned Word Saturate (AltiVec specific) 








vsumsws 


VT,VA,VB 


Vector Sum Across Signed Word Saturate (AltiVec specific) 








vsum2sws 


VT,VA,VB 


Vector Sum Across Partial (1/2) Signed Word Saturate (AltiVec 
specific) 








vsum4sbs 


VT,VA,VB 


Vector Sum Across Partial (1/4) Signed Byte Saturate (AltiVec 
specific) 








vsum4shs 


VT,VA,VB 


Vector Sum Across Partial (1/4) Signed Halfword Saturate (AltiVec 
specific) 








vsum4ubs 


VT,VA,VB 


Vector Sum Across Partial (1/4) Unsigned Byte Saturate (AltiVec 
specific) 








vupkhpx 


VT,VB 


Vector Unpack High Pixel 16 (AltiVec specific) 








vupkhsb 


VT/VB 


Vector Unpack High Signed Byte (AltiVec specific) 
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Operator 


Operands 


Operation Name 


vupkhsh 


VT,VB 


Vector Unpack High Signed Halfword (AltiVec specific) 








vupklsb 


VT,VB 


Vector Unpack Low Signed Byte (AltiVec specific) 








vupklpx 


VT,VB 


Vector Unpack Low Pixell6 (AltiVec specific) 








vupklsh 


VT,VB 


Vector Unpack Low Signed Halfword (AltiVec specific) 








vxor 


VT,VA,VB 


Vector Logical XOR (AltiVec specific) 


X 



Operator 


Operands 


Operation Name 


xor 


RA,RT,RB 


XOR 


xor. 


RA,RT,RB 











xori 


RA,RT,UI 


XOR Immediate 









xoris RA,RT,UI XOR Immediate Shifted 
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CHAPTER 



i386 Addressing Modes and Assembler 
Instructions 



Important: This is a preliminary section. It has not been updated with the latest revisions to the i386 
addressing modes and instructions. While most of the information is technically accurate, the document 
is incomplete and is subject to change. You can check http://developer.apple.com/ for information 
about updates to this and other developer documents. To receive notification of documentation 
updates, you can sign up for a free Apple Developer Connection Online membership and receive the 
biweekly ADC News e-mail newsletter. (See http://developer.apple.com/membership/ for more 
details about ADC membership.) 

This chapter contains information specific to the Intel i386 processor architecture, which includes the 
i386, i486, and Pentium processors. The first section, "i386 Registers and Addressing Modes" (page 
125), lists the registers available and describes the addressing modes used by assembler instructions. 
The second section, "i386 Assembler Instructions" (page 129), lists each assembler instruction with 
Mac OS X assembler syntax. 



Note: Don't confuse the i386 architecture with the i386 processor. Darwin makes use of instructions 
specific to the i486 and Pentium processors, and will not run on an i386 processor. 



i386 Registers and Addressing Modes 



This section describes the conventions used to specify addressing modes and instruction mnemonics 
for the Intel i386 processor architecture. The instructions themselves are detailed in the next section, 
"i386 Assembler Instructions" (page 129). 



Instruction Mnemonics 



The instruction mnemonics that the assembler uses are based on the mnemonics described in the 
relevant Intel processor manuals. 
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Note: The Mac OS X assembler for Intel i386 processors always produces branch instructions that are 
long (32 bits) for non-local labels. This allows the link editor to do procedure ordering (seethe 
description of the sectorder option in the 1 d(l) man page). 



Registers 



Many instructions accept registers as operands. The available registers are listed in this section. The 
Mac OS X assembler for Intel i386 processors always uses names beginning with a percent sign ('%') 
for registers, so naming conflicts with identifiers aren't possible; further, all register names are in 
lowercase letters. 



General Registers 



Each of the 32-bit general registers of the i386 architecture are accessible by different names, which 
specify parts of that register to be used. For example, the AX register can be accessed as a single byte 
(%ah or %al), a 16-bit value (%ax), or a 32-bit value (%eax). The figure below shows the names of 
these registers and their relation to the full 32-bit storage for each register: 



Figure 6-1 Register Names in the 32-bit i386 architecture 







high-byte 


low-byte 


16-bit 


32-bit 










%eax 
%edx 
%ecx 
%ebx 

%ebp 
%esi 
%edi 
%esp 










%ax 
%dx 
%cx 
%bx 

%bp 
%si 
%di 
%sp 






%ah 


%al 






%dh 


%dl 




%ch 


%cl 






%bh 


%bl 



















































default use 

accumulator 
data 
count 
base 

frame base pointer 
source index 
destination index 
stack pointer 



31 



16|15 



8|7 



Floating-Point Registers 



Register 



%st 



%st(0)-%st(7) 



126 1386 Registers and Addressing Modes 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



CHAPTER 6 

i386 Addressing Modes and Assembler Instructions 



Segment Registers 



Register 


Description 


%cs 


code segment register 


%ss 


stack segment register 


%ds 


data segment register 


%es 


data segment register (string operation destination segment) 


%fs 


data segment register 


%gs 


data segment register 



Other Registers 



Register 


Description 


%cr0-%cr3 


control registers 


%db0-%db7 


debug registers 


Ur3-%tr7 


test registers 


%mm0-%mm7 


MMX registers 


%xmmO-%xnim7 


XMM registers 



Operands and Addressing Modes 



The i386 architecture uses four kinds of instruction operands: 

■ Register 

■ Immediate 

■ Direct Memory 

■ Indirect Memory 

Each type of operand corresponds to an addressing mode. Register operands specify that the value 
stored in the named register is to be used by the operator. Immediate operands are constant values 
specified in assembler code. Direct memory operands are the memory location of labels, or the value 
of a named register treated as an address. Indirect memory operands are calculated at run time from 
the contents of registers and optional constant values. 
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Register Operands 



A register operand is given simply as the name of a register. It can be any of the identifiers beginning 
with '%' listed above; for example, %eax. When an operator calls for a register operand of a particular 
size, the operand is listed as r8, r!6, or r32. 



Immediate Operands 



Immediate operands are specified as numeric values preceded by a dollar sign ('$'). They are decimal 
by default, but can be marked as hexadecimal by beginning the number itself with 'Ox'. Simple 
calculations are allowed if grouped in parentheses. Finally, an immediate operand can be given as a 
label, in which case its value is the address of that label. Here are some examples: 

$100 

$0x5fec4 

$(10*6) # calculated by the assembler 

$begl oop 

A reference to an undefined label is allowed, but that reference must be resolved at link time. 



Direct Memory Operands 



Direct memory operands are references to labels in assembler source. They act as static references to 
a single location in memory relative to a specific section, and are resolved at link time. Here's an 
example: 

. data 
var: .byte # declare a byte-size variable labelled "var" 

. text 



movb %al,var # move the low byte of the AX register into the 
# memory location specified by "var" 

By default, direct memory operands use the % d s segment register. This can be overridden by prefixing 
the operands with the segment register desired and a colon: 

movb %es:%al,var # move the low byte of the AX register into the 

# memory location in the segment given by %es 

# and "var" 

Note that the segment override applies only to the memory operands in an instruction; "var" is 
affected, but not % a 1 . The string instructions, which take two memory operands, use the segment 
override for both. A less common way of indicating a segment is to prefix the operator itself: 

es/movb %al,%var # same as above 
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Indirect Memory Operands 



Indirect memory operands are calculated from the contents of registers at run time. An indirect 
memory operand can contain a base register, and index register, a scale, and a displacement. The 
most general form is: 

displacement ( base _register, index _register, scale ) 

displacement is an immediate value. The base and index registers may be any 32-bit general register 
names, except that % e s p can't be used as an index register, scale must be 1, 2, 4, or 8; no other values 
are allowed. The displacement and scale can be omitted, but at least one register must be specified. 
Also, if items from the end are omitted, the preceding commas can also be omitted, but the comma 
following an omitted item must remain: 

10(%eax,%edx) 

(%eax) 

12( ,%ecx,2) 

12( ,%ecx) 

The value of an indirect memory operand is the memory location given by the contents of the register, 
relative to a segment's base address. The segment register used is %s s when the base register is %ebp 
or Zesp, and %ds for all other base registers. For example: 

movl (%eax),%edx # default segment register here is %ds 

The above assembler instruction moves 32 bits from the address given by % e a x into the % e d x register. 
The address %eax is relative to the %ds segment register. A different segment register from the default 
can be specified by prefixing the operand with the segment register name and a colon (':'): 

movl %es : (%eax) ,%edx 

A segment override can also be specified as an operator prefix: 

es/movl (%eax) ,%edx 



i386 Assembler Instructions 



Note the following points about the information contained in this section: 

■ N a me is the name that appears in the upper left corner of a page in the Intel manuals. 

■ Operation Name is the name that appears after the operator name in the Intel manuals. 
Processor-specific instructions are marked as they occur. 

■ The form of operands is that used in Intel's i486 Microprocessor Programmer's Reference Manual. 

■ The order of operands is source -> destination, the opposite of the order in Intel's manuals. 
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A 



Name 


Operator 


Operand 


Operation Name 


aaa 


aaa 




ASCII Adjust after Addition 











aad 



aad ASCII Adjust AX before Division 



aam 


aam 




ASCII Adjust AX after Division 











aas 



aas 



ASCII Adjust AL after Subtraction 



adc 


adc 


$imm8,r/m8 


Add with Carry 




adc 


$imml6,r/ml6 






adc 


$imm32,r/m32 






adc 


$imm8,r/ml6 






adc 


$imm8,r/m32 






adc 


r8,r/m8 






adc 


rl6,r/ml6 






adc 


r32,r/m32 






adc 


r/m8,r8 






adc 


r/ml6,rl6 






adc 


r/m32,r32 













add 


add 


$imm8,r/m8 


Add 




add 


$imml6,r/ml6 






add 


$imm32,r/m32 






add 


%imm8,r/ml6 






add 


$imm8,r/m32 
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add 


r8,r/m8 








add 


rl6,r/ml6 








add 


r32,r/m32 








add 


r/m8,r8 








add 


r/ml6,rl6 








add 


r/m32,r32 






















and 


and 


$imm8,r/m8 


Logical AND 




and 


$imml6,r/ml6 






and 


$imm32,r/m32 






and 


$imm8,r/ml6 






and 


$imm8,r/m32 






and 


r8,r/m8 






and 


rl6,r/ml6 






and 


r32,r/m32 






and 


r/m8,r8 






and 


r/ml6,rl6 






and 


r/m32,r32 













arpl arpl 



rl6,r/ml6 Adjust RPL Field of Selector 



B 



Name 


Operator 


Operand 


Operation Name 


bound 


bound 


ml6&16,rl6 


Check Array Index Against Bounds 




bound 


m32&32,r32 













bsf 


bsf 


r/ml6,rl6 


Bit Scan Forward 




bsf 


r/m32,rl6 
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bsr 


bsr 


r/ml6,rl6 


Bit Scan Reverse 




bsr 


r/m32,rl6 













bswap 


bswap 


r32 


Byte Swap (i486-specific) 











bt 


bt 


rl6,r/ml6 


Bit Test 




bt 


r32,r/m32 






bt 


$imm8,r/ml6 






bt 


$imm8,r/m32 













btc 


btc 


rl6,r/ml6 


Bit Test and Complement 




btc 


r32,r/m32 






btc 


$imm8,r/ml6 






btc 


$imm8,r/m32 
















btr 


btr 


rl6,r/ml6 


Bit Test and Reset 






btr 


r32,r/m32 








btr 


$imm8,r/ml6 








btr 


$imm8,r/m32 






















bts 


bts 


rl6,r/ml6 


Bit Test and Set 






bts 


r32,r/m32 








bts 


$imm8,r/ml6 








bts 


%imm8,r/m32 
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c 



Name 


Operator 


Operand 


Operation Name 


call 


call 


rell6 


Call Procedure 




call 


r/ml6 






call 


ptrl6:16 






call 


ml6:16 






call 


rel32 






call 


r/m32 






lcall 


$imml6,$imm32 






lcall 


ml6 






lcall 


m32 














cbw cwde 


cbw 




Convert Byte to Word 




cwde 




Convert Word to Doubleword 











clc 



clc Clear Carry Flag 



eld 


eld 




Clear Direction Flag 











cli 


cli 




Clear Interrupt Flag 











cits 


cits 




Clear Task-Switched Flag inCRO 











cmc 


cmc 




Complement Carry Flag 











emp emp $imm8,r/m8 



Compare Two Operands 



emp $imml6,r/ml6 
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cmp 


$imm32,r/m32 






cmp 


$imm8,r/ml6 






cmp 


$imm8,r/m32 






cmp 


r8,r/m8 






cmp 


rl6,r/ml6 






cmp 


r32,r/m32 






cmp 


r/m8,r8 






cmp 


r/ml6,rl6 






cmp 


r/m32,r32 













cmps cmpsb cmpsw cmpsd 


Compare String Operands 




cmps 


m8,m8 






cmps 


ml6,ml6 






cmps 


m32,m32 






cmpsb 








cmpsw 








cmpsd 








(optional forms with segment override) 




cmpsb 


%seg:0(%esi ) ,%es :0(%edi ) 






cmpsw 


%seg:0(%esi ) ,%es :0(%edi ) 






cmpsd 


%seg:0(%esi ) ,%es :0(%edi ) 
















cmpxchg 


cmpxchg 


r8,r/m8 


Compare and Exchange (i486-specific) 






cmpxchg 


rl6,r/ml6 








cmpxchg 


r32,r/m32 

















cmpxchg8b 



cmpxchg8b 



m32 



Compare and Exchange 8 Bytes (Pentium-specific) 
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cpuid 


cpuid 


CPU Identification (Pentium-specific) 










cwd cdq 


cwd 


Convert Word to Doubleword/ 




cdq 


Convert Doubleword to Quadword 



D 



Name 


Operator 


Operand 


Operation Name 


daa 


daa 




Decimal Adjust AL after Addition 









das 


das 




Decimal Adjust AL after Subtraction 











dec 


dec 


r/m8 


Decrement by 1 






dec 


r/ml6 








dec 


r/m32 








dec 


rl6 








dec 


r32 




















div 


div 


r/m8,%a1 


Unsigned Divide 




div 


r/ml6,%ax 






div 


r/m32,%eax 





Name 



enter 



Operator Operand 



Operation Name 



enter $imml6,$imm8 Make Stack Frame for Procedure Parameters 
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Name 


Operator 


Operand 


Operation Name 


f2xml 


f2xml 




Computer 2x-l 











fabs 


fabs 




Absolute Value 












fadd faddp fiadd 


Add 




fadd 


m32real 






fadd 


m64real 






fadd 


ST(i),ST 






fadd 


ST,ST(i) 






faddp 


ST,ST(i) 






fadd 








fiadd 


m32int 






fiadd 


mlSint 













fbld 


fbld 


m80dec 


Load Binary Coded Decimal 











fbstp 



fbstp m80dec 



Store Binary Coded Decimal and Pop 



fchs 


fchs 




Change Sign 











fclex fnclex 


fclex 




Clear Exceptions 




fnclex 















fcom fcomp fcompp 


Compare Real 




fcom 


m32real 
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fcom 


m64real 






fcom 


ST(i) 






fcom 








fcomp 


m32real 






fcomp 


m64real 






fcomp 


ST(i) 






fcomp 








fcompp 















fcos 


fcos 




Cosine 











fdecstp 


fdecstp 




Decrement Stack-Top Pointer 











fdiv fdivp fidiv 


Divide 




fdiv 


m32real 






fdiv 


m64real 






fdiv 


ST(i),ST 






fdiv 


ST,ST(i) 






fdivp 


ST,ST(i) 






fdiv 








fidiv 


m32int 






fidiv 


ml6int 













fdivr fdivpr fidivr 


Reverse Divide 




fdivr 


m32real 






fdivr 


m64real 






fdivr 


ST(i),ST 






fdivr 


ST,ST(i) 
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fdivrp 


ST,ST(i) 






fdivr 








fidivr 


m32int 






fidivr 


ml6int 













ffree 


ffree 


ST(i) 


Free Floating-Point Register 











ficom f icomp 


Compare Integer 




ficom 


mlSreal 






ficom 


m32real 






ficomp 


ml6int 






ficomp 


m32int 













fild 


filds 


ml6int 


Load Integer 




fildl 


m32int 






fildq 


m64int 













fincstp 


fincstp 




Increment Stack-Top Pointer 











finit fninit 


finit 




Initialize Floating-Point Unit 




fninit 















fist fistp 


fists 


ml6int 


Store Integer 




fistl 


m32int 






fistps 


ml6int 






fistpl 


m32int 






fistpq 


m64int 
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fid 


fids 


m32real 


Load Real 




fldl 


m64real 






fldt 


m80real 






fid 


ST(i) 













fldl fldl2t fldl2e fldpi fldlg2 gldln2 fldz 


Load Constant 




fldl 








fld2t 








fld2e 








fldpi 








fldlg2 








fldln2 








fldz 















fldcw fldcw 



mlbyte 



Load Control Word 



fldenv 


fldenv 


ml4/28byte 


Load FPU Environment 











fmul fmulp fimul 


Multiply 




fmul 


m32real 






fmul 


m64real 






fmul 


ST(i),ST 






fmul 


ST(i),ST 






fmulp 


ST,ST(i) 






fmul 








fimul 


m32int 






fimul 


ml6int 
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fnop 


fnop 




No Operation 











fpatan 


fpatan 




Partial Arctangent 











fprem 



fprem Partial Remainder 



fpreml 


fpreml 




Partial Remainder 











fptan 


fptan 




Partial Tangent 











frndint 


frndint 




Round to Integer 











frstor 


frstor 


m94/108byte 


Restore FPU State 











fsave fnsave 


Store FPU State 




fsave 


m94/108byte 






fnsave 


m94/108byte 













fscale 


fscale 




Scale 











fsin 


fsin 




Sine 











fsincos 


fsincos 




Sine and Cosine 











fsqrt 


fsqrt 




Square Root 











fst fstp 


fst 


m32real 


Store Real 
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fst 


m64real 






fst 


ST(i) 






fstp 


m32real 






fstp 


m64real 






fstp 


m80real 






fstp 


ST(i) 













fstcw fnstcw 

fstcw mlbyte 



Store Control Word 



fnstcw mlbyte 



fstenv fnstenv 


Store FPU Environment 




fstenv 


ml4/28byte 






fnstenv 


ml4/28byte 













fstsw fnstsw 


Store Status Word 




fstsw 


mlbyte 






fstsw 


%ax 






fnstsw 


mlbyte 






fnstsw 


%ax 













fsub fsubp fisub 


Subtract 




fsub 


m32real 






fsub 


m64real 






fsub 


ST(i),ST 






fsub 


ST,ST(i) 






fsubp 


ST,ST(i) 






fsub 







i386 Assembler Instructions 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



141 



CHAPTER 6 

i386 Addressing Modes and Assembler Instructions 





fisub 


m32int 






fisub 


ml6int 













fsubr fsubpr fisubr 


Reverse Subtract 




fsubr 


m32real 






fsubr 


m64real 






fsubr 


ST(i),ST 






fsubr 


ST,ST(i) 






fsubpr 


ST,ST(i) 






fsubr 








fisubr 


m32int 






fisubr 


ml6int 













ftst 


ftst 




Test 











fucom fucomp fucompp 


Unordered Compare Real 




fucom 


ST(i) 






fucom 








fucomp 


ST(i) 






fucomp 








fucompp 















fwait 


fwait 




Wait 











fxam 


fxam 




Examine 











fxch 


fxch 


ST(i) 


Exchange Register Contents 




fxch 
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fxtract 


fxtract 




Extract Exponent and Significand 











fy!2x 


fy!2x 




Compute y ¥ log2x 











fy!2xpl 


fy!2xpl 




Compute y ¥ log2(x+l) 



H 



Name 

hit 



Operator Operand 

hit 



Operation Name 

Halt 



Name 


Operator 


Operand 


Operation Name 


idiv 


idiv 


r/m8 


Signed Divide 




idiv 


r/ml6,%ax 






idiv 


r/m32,7oeax 













imul 


imul 


r/m.8 


Signed Multiply 




imul 


r/ml6 






imul 


r/m32 






imul 


r/ml6,rl6 






imul 


r/m32,r32 






imul 


$imm8,r/ml6,rl6 






imul 


$imm8,r/m32,r32 






imul 


$imm8,rl6 






imul 


$imm8,r32 






imul 


$imml6,r/ml6,rl6 






imul 


$imm32,r/m32,r32 
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imul 


$imml6,rl6 






imul 


$imm32,r32 













in 


in 


$j'mmS,%al 


Input from Port 




in 


$imm8,%ax 






in 


$imm8 r %eax 






in 


%dx,%al 






in 


%dx,%ax 






in 


%dx,%eax 













inc 


inc 


r/m.8 


Increment by 1 




inc 


r/ml6 






inc 


r/m32 






inc 


rl6 






inc 


r32 













ins insb insw insd 


Input from Port to String 




ins 








insb 








insw 








insd 















int into 


int 


3 


Call to Interrupt Procedure 




int 


$imm8 






into 















invd 


invd 




Invalidate Cache (i486-specific) 
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invlpg 


invlpg 


m 


Invalidate TLB Entry (i486-specific) 











iret iretd 


iret 




Interrupt Return 




iretd 







Name 


Operator 


Operand 


Operation Name 


)cc 






Jump if Condition is Met 




J a 


rel8 


short if above 




jae 


rel8 


short if above or equal 




P 


rel8 


short if below 




jbe 


rel8 


short if below or equal 




jc 


rel8 


short if carry 




jcxz 


rel8 


short if % c x register is 




jecxz 


rel8 


short if % e c x register is 




je 


rel8 


short if equal 




J z 


rel8 


short if 




jg 


rel8 


short if greater 




JS e 


rel8 


short if greater or equal 




jl 


rel8 


short if less 




jle 


rel8 


short if less or equal 




jna 


rel8 


short if not above 




jnae 


rel8 


short if not above or equal 




jnb 


rel8 


short if not below 




jnbe 


rel8 


short if not below or equal 




jnc 


rel8 


short if not carry 




jne 


rel8 


short if not equal 




jng 


rel8 


short if not greater 
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Name 


Operator 


Operand 


Operation Name 




jnge 


rel8 


short if not greater or equal 




jnl 


rel8 


short if not less 




jnle 


rel8 


short if not less or equal 




jno 


rel8 


short if not overflow 




jnp 


rel8 


short if not parity 




jns 


rel8 


short if not sign 




jnz 


rel8 


short if not 




j° 


rel8 


short if overflow 




JP 


rel8 


short if parity 




jpe 


rel8 


short if parity even 




jpo 


rel8 


short if parity odd 




]'s 


rel8 


short if sign 




J z 


rel8 


short if zero 




j a 


rell6/32 


near if above 




jae 


rell6/32 


near if above or equal 




jb 


rell6/32 


near if below 




jbe 


rell6/32 


near if below or equal 




J c 


rell6/32 


near if carry 




je 


rell6/32 


near if equal 




jz 


rell6/32 


near if 




jg 


rell6/32 


near if greater 




JS e 


rell6/32 


near if greater or equal 




jl 


rell6/32 


near if less 




jle 


rell6/32 


near if less or equal 




jna 


rell6/32 


near if not above 




jnae 


rell6/32 


near if not above or equal 




jnb 


rell6/32 


near if not below 



146 1386 Assembler Instructions 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



CHAPTER 6 

i386 Addressing Modes and Assembler Instructions 



Name 


Operator 


Operand 


Operation Name 




jnbe 


rell6/32 


near if not below or equal 




jnc 


rell6/32 


near if not carry 




jne 


rell6/32 


near if not equal 




J n S 


rell6/32 


near if not greater 




jnge 


rell6/32 


near if not greater or less 




jnl 


rell6/32 


near if not less 




jnle 


rell6/32 


near if not less or equal 




jno 


rell6/32 


near if not overflow 




jnp 


rell6/32 


near if not parity 




jns 


rell6/32 


near if not sign 




jnz 


rell6/32 


near if not 




jo 


rell6/32 


near if overflow 




JP 


rell6/32 


near if parity 




jpe 


rell6/32 


near if parity even 




jpo 


rell6/32 


near if parity odd 




js 


rell6/32 


near if sign 




J z 


rell6/32 


near if 











jmp 


jmp 


rel8 


Jump 




jmp 


rell6 






jmp 


r/ml6 






jmp 


rel32 






jmp 


r/m32 






ljmp 


$imml6,$imm32 






ljmp 


ml6 






ljmp 


m32 
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L 



Name 


Operator 


Operand 


Operation Name 


lahf 


lahf 




Load Flags into AH Register 











lar 


lar 


r/ml6,rl6 


Load Access Rights Byte 




lar 


r/m32,r32 













lea 


lea 


m,rl6 


Load Effective Address 




lea 


m,r32 













leave 


leave 




High Level Procedure Exit 











lgdt lidt 


lgdt 


ml6&32 


Load Global /Interrupt 




lidt 


ml6&32 


Descriptor Table Register 











lgs lss Ids les lfs 


Load Full Pointer 




lgs 


ml6:16,rl6 






lgs 


ml6:32,r32 






lss 


ml6:16,rl6 






lss 


ml6:32,r32 






Ids 


ml6:16,rl6 






Ids 


ml6:32,r32 






les 


ml6:16,rl6 






les 


ml6:32,r32 






lfs 


ml6:16,rl6 






lfs 


ml6:32,r32 
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lldt 


lldt 


r/ml6 


Load Local Descriptor Table Register 











lmsw 


lmsw 


r/ml6 


Load Machine Status Word 











lock 


lock 




Assert LOCK# Signal Prefix 











lods lodsb lodsw lodsd 


Load String Operand 




lods 


m8 






lods 


ml6 






lods 


m32 






lodsb 








lodsw 








lodsd 








(optional forms with segment override) 




lodsb 


%seg :0(%esi ),%al 






lodsw 


%seg:0(%esi ),%al 






lodsd 


%seg:0(%esi ),%al 













loop loopcond 


Loop Control with CX Counter 




loop 


rel8 






loope 


rel8 






loopz 


rel8 






loopne 


rel8 






loopnz 


rel8 













Isl 



lsl 



r/ml6 r rl6 



Load Segment Limit 



lsl 



r/m32,r32 
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ltr 



ltr r/ml6 



Load Task Register 



M 



Name 


Operator 


Operand 


Operation Name 


mov 


mov 


r8,r/m8 


Move Data 




mov 


rl6,r/ml6 






mov 


r32,r/m32 






mov 


r/m8,r8 






mov 


r/ml6,rl6 






mov 


r/ml6,rl6 






mov 


Sreg,r/ml6 






mov 


r/ml6,Sreg 






mov 


moffs8,°U~\ 






mov 


moffs8,%ax 






mov 


moffs8,7oeax 






mov 


%d,~\,moffs8 






mov 


% a x,moffsl6 






mov 


% e a x,moffs32 






mov 


$imm8,reg8 






mov 


$imml6,regl6 






mov 


$imm32,reg32 






mov 


$imm8,r/m8 






mov 


$imml6,r/ml6 






mov 


%imm32,r/m32 













mov 


mov 


r32,%cr0 


Move to/from Special Registers 




mov 


%crO/%crZ/%cr3,r32 






mov 


%crZ/%cr3,r32 
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mov 


%dr0-3,r32 






mov 


Xdr6/%6r7,r32 






mov 


r32,%dr0-3 






mov 


r32,%dr6/%dr7 






mov 


7atrA/%tr5/7otr6/%tr7,r32 






mov 


r32,%trA/%trb/%tr6/%tr7 






mov 


7,tr3,r32 






mov 


r32,%tr3 













movs movsb movsw movsd 


Move Data from String to String 




movs 


m8,m8 






movs 


ml6,ml6 






movs 


m32,m32 






movsb 









movsw 








movsd 
















(optional forms with segment override) 




movsb 


%seg:0(%esi ) ,%es:0(%edi ) 






movsw 


%seg:0(%esi ) ,%es:0(%edi ) 






movsd 


%seg:0(%esi ) ,%es:0(%edi ) 













movsx 


movsx 


r/m8,rl6 


Move with Sign-Extend 




movsx 


r/m8,r32 






movsx 


r/ml6,r32 













movzx 



movzx r/m8,r!6 



Move with Zero-Extend 



movzx r/m8,r32 
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movzx 


r/ml6,r32 




















mul 


mul 


r/m8,%a1 


Unsigned Multiplication of AL or AX 




mul 


r/ml6,%ax 






mul 


r/m32,%eax 





N 



Name 


Operator 


Operand 


Operation Name 


neg 


neg 


r/m8 


Two's Complement Negation 




neg 


r/ml6 






neg 


r/m32 













nop 



nop 



No Operation 



not 


not 


r/m8 


One's Complement Negation 




not 


r/ml6 






not 


r/m32 





o 



Name 


Operator 


Operand 


Operation Name 


or 


or 


$imm8,r/m8 


Logical Inclusive OR 




or 


$imml6,r/ml6 






or 


$imm32,r/m32 






or 


$imm8,r/ml6 






or 


$imm8,r/m32 






or 


r8,r/m8 






or 


rl6,r/ml6 
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Name 


Operator 


Operand 


Operation Name 




or 


r32,r/m32 






or 


r/m8,r8 






or 


r/ml6,rl6 






or 


r/m32,r32 













out 


out 


%al ,$imm8 


Output to Port 




out 


%ax,$imm8 






out 


7<,eax,$imm8 






out 


%al,%dx 






out 


%ax,%dx 






out 


%eax,%dx 













outs outsb outsw outsd 


Output String to Port 




outs 


r/m8,%dx 






outs 


r/ml6,%dx 






outs 


r/m32,%dx 






outsb 








outsw 








outsd 







Name 


Operator 


Operand 


Operation Name 


pop 


pop 


ml6 


Pop a Word from the Stack 




pop 


m32 






pop 


rl6 






pop 


r32 






pop 


%ds 
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Name 


Operator 


Operand 


Operation Name 




pop 


%es 






pop 


%ss 






pop 


%fs 






pop 


%gs 













popa popad 






Pop all General Registers 




popa 








popad 















popf popfd 


popf 




Pop Stack into FLAGS or 




popfd 




EFLAGS Register 











push 


push 


ml6 


Push Operand onto the Stack 




push 


m32 






push 


rl6 






push 


r32 






push 


%imm8 






push 


%imml6 






push 


$imm32 






push 


Sreg 













pusha pushad Push all General Registers 



pusha 



pushad 



pushf pushf d 
pushf 



Push Flags Register onto the Stack 
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pushfd 







R 



Name 


Operator 


Operand 


Operation Name 


rcl rcr rol ror 


Rotate 




rcl 


l,r/m8 






rcl 


%c],r/m8 






rcl 


$imm8,r/m8 






rcl 


l,r/ml6 






rcl 


%c~\,r/ml6 






rcl 


$imm8,r/ml6 






rcl 


l,r/m32 






rcl 


%c~\,r/m32 






rcl 


$imm8,r/m32 






rcr 


l,r/m8 






rcr 


%c],r/m8 






rcr 


$imm8,r/m8 






rcr 


l,r/ml6 






rcr 


%c~\,r/ml6 






rcr 


$imm8,r/ml6 






rcr 


l,r/m32 






rcr 


%c~\,r/m32 






rcr 


$imm8,r/m32 






rol 


l,r/m8 






rol 


%c1,r/m8 






rol 


$imm8,r/m8 






rol 


l,r/ml6 






rol 


%c],r/ml6 





i386 Assembler Instructions 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



155 



CHAPTER 6 

i386 Addressing Modes and Assembler Instructions 



Name 


Operator 


Operand 


Operation Name 




rol 


$imm8,r/ml6 






rol 


l,r/m32 






rol 


%c~\,r/m32 






rol 


$imm8,r/m32 






ror 


l,r/m8 






ror 


%c~\,r/m8 






ror 


$imm8,r/m8 






ror 


l,r/ml6 






ror 


%c~\,r/ml6 






ror 


$imm8,r/ml6 






ror 


l,r/m32 






ror 


%c~\,r/m32 






ror 


$imm8,r/m32 













rdmsr 


rdmsr 




Read from Model-Specific Register (Pentium-specific) 











rdstc 


rdstc 




Read from Time Stamp Counter (Pentium-specific) 











rep repe repz repne repnz 


Repeat Following String 




rep /ins 


%dx,rm8 


Operation 




rep /ins 


%dx,rml6 






rep /ins 


%dx,rm32 






rep/movs 


m8,m8 






rep/movs 


ml6,ml6 






rep/movs 


m32,m32 






rep /outs 


rm8,%dx 






rep /outs 


rml6,7odx 
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rep /outs 


rm32,%dx. 






rep/lods 


m8 






rep/lods 


ml6 






rep/lods 


m32 






rep/stos 


m8 






rep/stos 


ml6 






rep/stos 


m32 






repe/cmps 


m8,m8 






repe/cmps 


ml6,ml6 






repe/cmps 


m32,m32 






repe/scas 


m8 






repe/scas 


ml6 






repe/scas 


m32 






repne/cmps 


m8,m8 






repne/cmps 


ml6,ml6 






repne/cmps 


m32,m32 






repne/scas 


m8 






repne/scas 


ml6 






repne/scas 


m32 













ret 


ret 




Return from Procedure 




ret 


$imml6 













rsm rsm 



Resume from System-Management Mode (Pentium-specific) 



Name 


Operator 


Operand 


Operation Name 


sahf 


sahf 




Store AH into Flags 
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sal sar shl shr 


Shift 
Instructions 




sal 


l,r/m8 






sal 


%c],r/m8 






sal 


$imm8,r/m8 






sal 


l,r/ml6 






sal 


%c1,r/ml6 






sal 


$imm8,r/ml6 






sal 


l,r/m32 






sal 


%c~\,r/m32 






sal 


$imm8,r/m32 






sar 


l,r/m8 






sar 


%c~\,r/m8 






sar 


$imm8,r/m8 






sar 


l,r/ml6 






sar 


%cl,r/m26 






sar 


$imm8,r/ml6 






sar 


l,r/m32 






sar 


%c],r/m32 






sar 


$imm8,r/m32 






shl 


l,r/m8 






shl 


%c1,r/m8 






shl 


$imm8,r/m8 






shl 


l,r/ml6 






shl 


%c1,r/ml6 






shl 


$imm8,r/ml6 






shl 


l,r/m32 






shl 


%c~\,r/m32 






shl 


$imm8,r/m32 
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shr 


l,r/m8 






shr 


%c~\,r/m8 






shr 


$imm8,r/m8 






shr 


l,r/ml6 






shr 


%c\,r/ml6 






shr 


$imm8,r/ml6 






shr 


l,r/m32 






shr 


%cl,r/m32 






shr 


$imm8,r/m32 













sbb 


sbb 


$imm8,r/m8 


Integer Subtraction with Borrow 






sbb 


$imml6,r/ml6 








sbb 


$imm32,r/m32 








sbb 


$imm8,r/ml6 








sbb 


%imm8,r/m32 








sbb 


r8,r/m8 








sbb 


rl6,r/ml6 








sbb 


r32,r/m32 








sbb 


r/m8,r8 








sbb 


r/ml6,rl6 








sbb 


r/m32,r32 






















seas scasb scasw scasd 


Compare String Data 




seas 


m8 






seas 


ml6 






seas 


m32 






scasb 








scasw 
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scasd 
















(optional forms with segment override) 




scasb 


%al ,%seg:0Uedi ) 






scasw 


%ax,%seg:OUedi ) 






scasd 


%eax,%seg:0(%edi ) 













setcc 






Byte Set on Condition 




seta 


r/m8 


above 




setae 


r/m8 


above or equal 




setb 


r/m8 


below 




setbe 


r/m8 


below or equal 




setc 


r/m8 


carry 




sete 


r/m8 


equal 




setg 


r/m8 


greater 




setge 


r/m8 


greater or equal 




setl 


r/m8 


less 




setle 


r/m8 


less or equal 




setna 


r/m8 


not above 




setnae 


r/m8 


not abover or equal 




setnb 


r/m8 


not below 




setnbe 


r/m8 


not below or equal 




setnc 


r/m8 


not carry 




setne 


r/m8 


not equal 




setng 


r/m8 


not greater 




setnge 


r/m8 


not greater or equal 




setnl 


r/m8 


not less 




setnle 


r/m8 


not less or equal 




setno 


r/m8 


not overflow 
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setnp 


r/m8 


not parity 






setns 


r/m8 


not sign 






setnz 


r/m8 


not zero 






seto 


r/m8 


overflow 






setp 


r/m8 


parity 






setpe 


r/m.8 


parity even 






setpo 


r/m8 


parity odd 






sets 


r/m.8 


sign 






setz 


r/m8 


zero 


















sgdt sidt 


sgdt 


m 


Store Global /Interrupt 




sidt 


m 


Descriptor Table Register 











shld 


shld 


$imm8,rl6,r/ml6 


Double Precision Shift Left 




shld 


$imm8,r32,r/m32 






shld 


%cl ,rl6,r/ml6 






shld 


%c~l ,r32,r/m32 













shrd 


shrd 


$imm8,rl6,r/ml6 


Double Precision Shift Right 




shrd 


$imm8,r32,r/m32 






shrd 


%c~\ ,rl6,r/ml6 






shrd 


%cl ,r32,r/m32 













sidt 


sidt 


r/ml6 


Store Local Descriptor Table Register 











smsw 


smsw 


r/ml6 


Store Machine Status Word 











stc 


stc 




Set Carry Flag 











i386 Assembler Instructions 

2006-07-24 | © 2003, 2006 Apple Computer, Inc. All Rights Reserved. 



161 



CHAPTER 6 

i386 Addressing Modes and Assembler Instructions 



std 


std 




Set Direction Flag 











sti 


sti 




Set Interrupt Flag 











stos stosb stosw stosd 


Store String Data 




stos 


m8 






stos 


ml6 






stos 


m32 






stosb 








stosw 








stosd 








(optional forms with segment override) 




stosb 


%al ,%seg:0(%edi ) 






stosw 


%ax,%seg:0(%edi ) 






stosd 


%eax,%seg:0(%edi ) 













str 


str 


r/ml6 


Store Task Register 











sub 


sub 


$imm8,r/m8 


Integer Subtraction 




sub 


$imml6,r/ml6 






sub 


$imm32,r/m32 






sub 


$imm8,r/ml6 






sub 


$imm8,r/m32 






sub 


r8,r/m8 






sub 


rl6,r/ml6 






sub 


r32,r/m32 






sub 


r/m8,r8 






sub 


r/ml6,rl6 
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sub 



r/m32 r r32 



Name 


Operator 


Operand 


Operation Name 


test 


test 


$imm8,r/m8 


Logical Compare 




test 


$imml6,r/ml6 






test 


$imm32,r/m32 






test 


r8,r/m8 






test 


rl6,r/ml6 






test 


r32,r/m32 





V 



Name 


Operator 


Operand 


Operation Name 


verr verw 


verr 


r/ml6 


Verify a Segment for Reading or Writing 




verw 


r/ml6 





w 



Name 


Operator 


Operand 


Operation Name 


wait 


wait 




Wait 











wbinvd 


wbinvd 




Write-Back and Invalidate Cache (i486-specific) 











wrmsr 



wrmsr Write to Model-Specific Register (Pentium-specific) 



X 



Name 


Operator 


Operand 


Operation Name 


xadd 


xadd 


r8,r/m8 


Exchange and Add (i486-specific) 
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Name 


Operator 


Operand 


Operation Name 




xadd 


rl6,r/ml6 






xadd 


r32,r/m32 











xchg 


xchg 


rl6,%ax 


Exchange Register /Memory 




xchg 


%ax,rl6 


with Register 




xchg 


%eax,r32 






xchg 


r32,%eax 






xchg 


r8,r/m8 






xchg 


r/m8,r8 






xchg 


rl6,r/ml6 






xchg 


r/ml6,rl6 






xchg 


r32,r/m32 






xchg 


r/m32,r32 













xlat xlatb 


xlat 


m8 


Table Look-up Translation 




xlatb 















xor 


xor 


$imm8,r/m8 


Logical Exclusive OR 




xor 


$imml6,r/ml6 






xor 


$imm32,r/m32 






xor 


%imm8,r/ml6 






xor 


$imm8,r/m32 






xor 


r8,r/m8 






xor 


rl6,r/ml6 






xor 


r32,r/m32 






xor 


r/m8,r8 






xor 


r/ml6,rl6 
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xor 


r/m32,r32 
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APPENDIX 



Mode-Independent Macros 



If you want to write assembly code that runs both in 32-bit PowerPC and 64-bit PowerPC environments, 
you must make sure that 32-bit-specific code runs in 32-bit environments and 64-bit-specific code 
runs in 64-bit environments. This appendix introduces the macros included in the Mac OS X vl0.4 
SDK to facilitate the development of assembly code that runs in both environments. 

Themode_i ndependent_asm. h file in /usr/include/archi tecture/ppc defines a set of macros that 
make it easy to write code that runs in 32-bit PowerPC and 64-bit PowerPC environments. These 
macros include both manifest constants and pseudo mnemonics. For instance, the GPR_ BYTES constant 
is either 4 or 8 (the size of the general-purpose registers). And 1 g pseudo mnemonic expands to 1 wz 
in a 32-bit environment or 1 d in a 64-bit environment. The header file documents all the macros in 
detail. 

For example, the 32-bit code to get a pointer at offset 16 from GPR15 into GPR14 is: 

Iwz rl4,16(rl5) 
The 64-bit code is: 

Id rl4,16(rl5) 

One way to support both environments is by using conditional inclusion statements. For example, 

the following code uses ppc64 to determine whether the program is running in 64-bit mode and 

executes the appropriate statement: 

#ifdef ppc64 

Id rl4,16(rl5) 
#el se 

Iwz rl4,16(rl5) 
#endi f 

However, a simpler way is to use the 1 g pseudo mnemonic, as shown here: 

#i ncl ude <archi tecture/ppc/mode_i ndependent_asm. h> 

Ig rl4,16(rl5) 

If you write code that invokes functions that may be relocated, you may need to create a lazy symbol 
pointer in 32-bit code similar to this: 

. 1 azy_symbol_poi nter 
L_foo$l azy_ptr : 

. i ndi rect_symbol _foo 
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.long dyl d_stub_bi ndi ng_hel per 

The assembly sequence for is as for 64-bit code is similar to the 32-bit code, but you need to ensure 
you allocate an 8-byte space for the symbol, using .quad instead of . 1 ong, as shown here: 

. 1 azy_symbol_poi liter 
L_foo$l azy_ptr : 

. i ndi rect_symbol _foo 

.quad dyl d_stub_bi ndi ng_hel per 

Using the g_l ong mode-independent macro instead of . 1 ong or .quad, you can write a streamlined 
dual-environment sequence without adding an #i f def statement. The mode-independent sequence 
would look like this: 

#i ncl ude <archi tecture/ppc/mode_i ndependent_asm. h> 

. 1 azy_symbol_poi nter 
L_foo$l azy_ptr : 

. i ndi rect_symbol _foo 

. g_l ong dyl d_stub_bi ndi ng_hel per 
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REVISION HISTORY 



Document Revision History 



This table describes the changes to Mac OS X Assembler Reference. 



Date 


Notes 


2006-07-24 


Changed the title from "Mac OS X Assembler Guide." 


2006-06-28 


Corrected syntax listings for the rep, repe, and repne i386 instructions. 


2006-05-23 


Updated for Xcode 2.3. Added information on IA-32 symbol stubs. 




Updated "Directives for Designating the Current Section" (page $@) in 
'Assembler Directives" (page $@) to include changes to IA-32 symbol-stub 
implementation and correct information for PowerPC symbol stubs. 




Specified that all expressions are evaluated as 64-bit values in 
"Operators" (page $@). 


2005-04-29 


Updated content to reflect additions made to the assembler and the Mac 
OS X SDK. 




Added dcbtl and debt! 128 operators to "PowerPC Assembler 
Instructions" (page 67). 




Added four-argument form of r 1 mi , r 1 w i mi , r 1 w i n m , and r 1 w n m operators . 




Added "Mode-Independent Macros" (page 167) to introduce the 
mode-independent macros in the Mac OS X vl0.4 SDK. 


2004-07-27 


Added information on dead-code stripping and the .machine and .quad 
assembler directives. 




Added "Directives for Dead-Code Stripping" (page 51), which documents 

. subsecti ons_vi a_symbo1 s and . no_dead_stri p. 




Added information on n o_d e a d_s t r i p and live_support section attributes 
to "Attribute Identifiers" (page 36). 




Added " .machine" (page 55), which provides details on the .machine 
directive. 
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Document Revision History 



Date 


Notes 




Added information on .quad directive to ".byte, .short, .long, and 
.quad" (page 45) in "Directives for Generating Data" (page 45). 




Removed all 68000-related content. 




Performed minor formatting and layout changes. 


2004-03-09 


Clarified applicability of . pri vate_extern directive. 


2003-11-02 


Added j b s r and j m p instructions to the PPC Assembler Instructions 
section. 


2003-09-11 


Added introduction and fixed minor organization bugs. 


2003-06-16 


Updated with relevant information for hardware updates at WWDC. 
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